Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Fortinet Exam NSE5_FAZ-7.2 Topic 4 Question 24 Discussion

Actual exam question for Fortinet's NSE5_FAZ-7.2 exam
Question #: 24
Topic #: 4
[All NSE5_FAZ-7.2 Questions]

Which log will generate an event with the status Contained?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Alysa at Jul 08, 2024, 11:13 AM

Limited Time Offer

25%

Off

Get Premium NSE5_FAZ-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Tonja
18 days ago
Hold on, I'm still trying to figure this out. Is it possible that none of these options are correct? That would be a real plot twist!
upvoted 0 times
Tresa
8 days ago
User 1: I think it's A) An IPS log with action=pass.
upvoted 0 times
...
...
Emelda
27 days ago
This is a tricky one! I'm going to go with option D. An AppControl log with action=blocked sounds like it could be the right answer.
upvoted 0 times
...
Denise
1 months ago
Hmm, I'm not sure about this one. Maybe option B? A WebFilter log with action=dropped could also be a good guess.
upvoted 0 times
...
Carolann
1 months ago
I think option C is the correct answer. An AV (anti-virus) log with action=quarantine would generate an event with the status Contained.
upvoted 0 times
German
19 days ago
I agree with option A. An IPS log with action=pass is the correct answer.
upvoted 0 times
...
My
21 days ago
I believe it's actually option A. An IPS log with action=pass would generate an event with the status Contained.
upvoted 0 times
...
Lino
24 days ago
I think option C is the correct answer.
upvoted 0 times
...
...
Bernardo
1 months ago
I agree with Malcom, the status Contained seems more likely to be generated by an IPS log with action=pass.
upvoted 0 times
...
Malcom
1 months ago
But the question specifically mentions the status Contained, which makes me think it's A.
upvoted 0 times
...
Levi
2 months ago
I disagree, I believe it's C) An AV log with action=quarantine.
upvoted 0 times
...
Malcom
2 months ago
I think the answer is A) An IPS log with action=pass.
upvoted 0 times
...

Save Cancel