View all questions & answers for the NSE 6 - FortiSIEM 7.2 Analyst Exam Materials exam

NSE 6 - FortiSIEM 7.2 Analyst Exam Materials - Question #30 Discussion

Comment Image Comment Image Comment Image

When FortiSIEM is configured to apply ZTNA tags, what is the order of events when an analyst wants to automatically block a ZTNA tagged host? (Choose one answer)

  • A. FortiEMS tags host > FortiSIEM receives tag information > FortiSIEM tags host > ZTNA tags enforced on FortiGate
  • B. FortiEMS receives tag information > FortiEMS tags host > FortiSIEM tags host > ZTNA tags enforced on FortiGate
  • C. FortiSIEM tags host > FortiEMS receives tag information > FortiEMS tags host > ZTNA tags enforced on FortiGate
  • D. FortiEMS tags host > FortiEMS receives tag information > FortiSIEM tags host > ZTNA tags enforced on FortiGate
Correct Answer: C

Brave-Dump Community Votes

Answer: C (2 votes) 66.67%
Answer: A (1 vote) 33.33%

Community Explanations & Comments (3)

RM 1 year ago
Selected: A
i choose letter A but there were 3 options were having the same exact words the lettet A , C and D
Anonymous User 6 months ago
Selected: C
As per the study guide and my understanding- FortiSIEM tags the host with Rule Tags (meaning that FortiSIEM tags the host) sends information to FortiEMS ( meaning that FortiEMS receives tag information) > FortiEMS tags host> then ZTNA policy on FortiGate. Hence the answer should be C.
Anonymous User 5 months ago
Selected: C
FortiSIEM tags host → FortiEMS receives tag information → FortiEMS tags host → ZTNA tags enforced on FortiGate