View all questions & answers for the NSE 6 - FortiSIEM 7.4 Analyst Exam Materials exam
NSE 6 - FortiSIEM 7.4 Analyst Exam Materials - Question #5 Discussion
Community Explanations & Comments (1)
Anonymous User
2 hours ago
Selected: C, D
Refer https://docs.fortinet.com/document/fortisiem/7.6.1/user-guide/693027/fortiems-endpoint-tagging#FortiEMS
Updated Remediation Scripts
FortiSIEM has updated several automated response (remediation) scripts to work with FortiEMS.
You can now, adhoc or via automation policy, execute a remediation script, via the Incidents page (From Incidents, select an incident and select Remediate Incident from the Actions drop-down list, and set/unset tag for the device in FortiEMS.) or Analytics > Investigation page.
This allows rules that have tags defined, to assign those tags to relevant hosts in the incident, that are also FortiClient managed devices.
The two primary remediation scripts are:
Set tag for device in FortiEMS
Unset tag for device in FortiEMS
Updated Remediation Scripts
FortiSIEM has updated several automated response (remediation) scripts to work with FortiEMS.
You can now, adhoc or via automation policy, execute a remediation script, via the Incidents page (From Incidents, select an incident and select Remediate Incident from the Actions drop-down list, and set/unset tag for the device in FortiEMS.) or Analytics > Investigation page.
This allows rules that have tags defined, to assign those tags to relevant hosts in the incident, that are also FortiClient managed devices.
The two primary remediation scripts are:
Set tag for device in FortiEMS
Unset tag for device in FortiEMS
Which two settings must you configure to allow FortiSIEM to automatically apply tags to devices on FortiClient EMS? (Choose two answers)
Brave-Dump Community Votes