View all questions & answers for the FCP - FortiAnalyzer 7.4 Administrator Exam Materials exam


Question 38 Discussion

What happens when the IOC breach detection engine on FortiAnalyzer finds web logs that match a blocklisted IP address? (Choose one answer)

  • A. The endpoint is marked as Compromised and, optionally, can be put in quarantine.
  • B. FortiAnalyzer flags the associated host for further analysis.
  • C. A new Infected entry is added for the corresponding endpoint.
  • D. The detection engine classifies those logs as Suspicious.
Correct Answer: A

Brave-Dump Clients Votes

C 100%

Comments



Jean_Teub 2025-11-27 09:14:11

Selected Answers: C


C