Exam NSE7_ZTA-7.2 Topic 1 Question 3 Discussion
Actual exam question for Fortinet's NSE7_ZTA-7.2 exam
Question #: 3
Topic #: 1
Question #: 3
Topic #: 1
Which statement is true regarding a FortiClient quarantine using FortiAnalyzer playbooks?
Suggested Answer: A Vote an answer
FortiAnalyzer playbooks are automated workflows that can perform actions based on triggers, conditions, and outputs. One of the actions that a playbook can perform is to quarantine a device by sending an API call to FortiClient EMS, which then instructs the FortiClient agent on the device to disconnect from the network. This can help isolate and contain a compromised or non-compliant device from spreading malware or violating policies. References := Quarantine a device from FortiAnalyzer playbooks Playbooks
by Baron at Feb 02, 2024, 08:18 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).