Exam NSE7_ZTA-7.2 Topic 1 Question 3 Discussion

Actual exam question for Fortinet's NSE7_ZTA-7.2 exam
Question #: 3
Topic #: 1
Which statement is true regarding a FortiClient quarantine using FortiAnalyzer playbooks?

Suggested Answer: A Vote an answer

FortiAnalyzer playbooks are automated workflows that can perform actions based on triggers, conditions, and outputs. One of the actions that a playbook can perform is to quarantine a device by sending an API call to FortiClient EMS, which then instructs the FortiClient agent on the device to disconnect from the network. This can help isolate and contain a compromised or non-compliant device from spreading malware or violating policies. References := Quarantine a device from FortiAnalyzer playbooks Playbooks

by Baron at Feb 02, 2024, 08:18 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10