ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE5_FAZ-7.0 All Questions

View all questions & answers for the NSE5_FAZ-7.0 exam
Go to Exam

Exam NSE5_FAZ-7.0 topic 1 question 26 discussion

Actual exam question from Fortinet's NSE5_FAZ-7.0
Question #: 26
Topic #: 1
[All NSE5_FAZ-7.0 Questions]

Refer to the exhibits.


How many events will be added to the incident created after running this playbook?

  • A. No events will be added.
  • B. Ten events will be added.
  • C. Five events will be added.
  • D. Thirteen events will be added.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by ulya_taliesin at Nov. 24, 2022, 12:55 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
BaraoAzul
Highly Voted 1 year, 11 months ago
I count 10 Intrusion + IPS + Medium. That would be B.
upvoted 9 times
...
PiotrSwi
Most Recent 9 months ago
Selected Answer: B
B - Correct.
upvoted 1 times
...
LiliRose
1 year, 2 months ago
Selected Answer: B
Match all conditions: Intrusion + IPS + Medium: 10
upvoted 2 times
...
Mickder
1 year, 3 months ago
I think that A should be correct https://docs.fortinet.com/document/fortianalyzer/7.4.0/administration-guide/337904/understanding-event-statuses Mitigated: The security risk is mitigated by being blocked or dropped. Example: an IPS/AV log with action=block/drop will have the event status Mitigated.
upvoted 3 times
...
truserud
1 year, 9 months ago
A is correct, as all events which match the filters are mitigated, and thus no incidents will be created when running the playbook.
upvoted 1 times
...
Ronnie89
1 year, 11 months ago
Will the playbook add mitigated events? Or does it need to be just unhandled? Cause it could be A
upvoted 1 times
...
cannoe
1 year, 11 months ago
I think the answer is B (Intrusion + IPS + Medium)
upvoted 1 times
...
D10SJoker
1 year, 11 months ago
Selected Answer: B
B is correct
upvoted 4 times
soporte127
1 year, 7 months ago
why b?
upvoted 1 times
...
...
ulya_taliesin
1 year, 11 months ago
yes C is correct !
upvoted 1 times
M1gu3l
1 year, 11 months ago
Why C?
upvoted 1 times
...
...
wayne0926
1 year, 11 months ago
Correct Ans: C
upvoted 1 times
...
ulya_taliesin
1 year, 11 months ago
I think her is B
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago