View all questions & answers for the NSE 8 - Recertification Exam (813) Materials exam

NSE 8 - Recertification Exam (813) Materials - Question #46 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. A customer is trying to setup a Playbook automation using a FortiAnalyzer, FortiWeb and FortiGate. The intention is to have the FortiGate quarantine any source of SQL Injection detected by the FortiWeb. They got the automation stitch to trigger on the FortiGate when simulating an attack to their website, but the quarantine object was created with the IP 0.0.0.0. Referring to the configuration and logs in the exhibits, which two statements are true? (Choose two answers)

  • A. FortiSOC Playbooks combining FortiWeb and FortiGate are not supported.
  • B. To diagnose this issue, you need to use the command diagnose test.application oftpd 22.
  • C. The Group By option in the handler should be different to src, so src can be used on the Playbook configuration.
  • D. To fix the issue the parameter for script on the Playbook configuration should be epip.
  • E. The FortiAnalyzer ADOM Type must be Fabric.
Correct Answer: C,E

Brave-Dump Community Votes

Answer: D, E (1 vote) 100%

Community Explanations & Comments (1)

boss123 10 months ago
Selected: D, E
endpoint ip should be used in playbook config