New Year Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Fortinet NSE 6 - LAN Edge 7.6 Architect FCSS_LED_AR-7.6 Question # 7 Topic 1 Discussion

Fortinet NSE 6 - LAN Edge 7.6 Architect FCSS_LED_AR-7.6 Question # 7 Topic 1 Discussion

FCSS_LED_AR-7.6 Exam Topic 1 Question 7 Discussion:
Question #: 7
Topic #: 1

Refer to the exhibits.

FCSS_LED_AR-7.6 Question 7

FCSS_LED_AR-7.6 Question 7

Examine the FortiGate configuration, FortiAnalyzer logs, and FortiGate widget shown in the exhibits.

Security Fabhc quarantine automation has been configured to isolate compromised devices automatically. FortiAnalyzer has been added to the Security Fabric, and an automation stitch has been configured to quarantine compromised devices.

To test the setup, a device with the IP address 10.0.2.1 that is connected through a managed FortiSwitch attempts to access a malicious website. The logs on FortiAnalyzer confirm that the event was recorded, but the device does not appear in the FortiGate quarantine widget.

Which two reasons could explain why FortiGate is not quarantining the device? (Choose two.)


A.

The IOC action should include only the FortiSwitch in the quarantine.


B.

The SSL inspection should be set to deep-Inspection


C.

The malicious website is not recognized as an indicator of compromise (IOC) by FortiAnalyzer.


D.

The threat detection services license is missing or invalid under FortiAnalyzer.


Get Premium FCSS_LED_AR-7.6 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.