Fortinet Exam NSE5_FAZ-7.2 Topic 4 Question 24 Discussion

Actual exam question for Fortinet's NSE5_FAZ-7.2 exam

Question #: 24
Topic #: 4

[All NSE5_FAZ-7.2 Questions]

Which log will generate an event with the status Contained?

AAn IPS log with action=pass.

BA WebFilter log with action=dropped.

CAn AV log with action=quarantine.

DAn AppControl log with action=blocked.

Show Suggested Answer

Suggested Answer: C

by Alysa at Jul 08, 2024, 11:13 AM

Limited Time Offer

25%

Off

Get Premium NSE5_FAZ-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tonja

4 months ago

Hold on, I'm still trying to figure this out. Is it possible that none of these options are correct? That would be a real plot twist!

upvoted 0 times

Aretha

3 months ago

Maybe it's C) An AV log with action=quarantine.

upvoted 0 times

...

Galen

3 months ago

No, I believe it's D) An AppControl log with action=blocked.

upvoted 0 times

...

Tresa

4 months ago

I think it's A) An IPS log with action=pass.

upvoted 0 times

...

Emelda

4 months ago

This is a tricky one! I'm going to go with option D. An AppControl log with action=blocked sounds like it could be the right answer.

upvoted 0 times

Delisa

3 months ago

I think option C is the best choice. An AV log with action=quarantine could generate an event with the status Contained.

upvoted 0 times

...

Glen

3 months ago

I'm not sure about this one, but I think option B could be the correct choice. A WebFilter log with action=dropped might generate an event with the status Contained.

upvoted 0 times

...

Tiffiny

3 months ago

I disagree, I believe option D is the right answer. An AppControl log with action=blocked seems more likely to generate an event with the status Contained.

upvoted 0 times

...