Fortinet Exam NSE5_FSM-6.3 Topic 6 Question 2 Discussion

Actual exam question for Fortinet's NSE5_FSM-6.3 exam

Question #: 2
Topic #: 6

[All NSE5_FSM-6.3 Questions]

Where do you configure rule notifications and automated remediation on FortiSIEM?

ANotification policy

BRemediation policy

CNotification engine

DRemediation engine

Show Suggested Answer

Suggested Answer: A

Rule Notifications and Automated Remediation: In FortiSIEM, notifications and automated remediation actions can be configured to respond to specific incidents or alerts generated by rules.

Notification Policy: This is the section where administrators configure the settings for notifications and specify the actions to be taken when a rule triggers an alert.

Configuration Options: Includes defining the recipients of notifications, the type of notifications (e.g., email, SMS), and any automated remediation actions that should be executed.

Importance: Proper configuration of notification policies ensures timely alerts and automated responses to incidents, enhancing the effectiveness of the SIEM system.

References: FortiSIEM 6.3 User Guide, Notifications and Automated Remediation section, which details how to configure notification policies for rule-triggered actions and responses.

by Val at Jul 10, 2024, 01:01 PM

Limited Time Offer

25%

Off

Get Premium NSE5_FSM-6.3 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ines

3 months ago

I bet the correct answer is something super obvious, and we're all just overthinking it. You know what they say, 'When in doubt, go with B!'

upvoted 0 times

Felton

2 months ago

C) Notification engine

upvoted 0 times

...

Dick

3 months ago

A) Notification policy

upvoted 0 times

...

Twana

3 months ago

I don't know, man. This question is making my brain hurt. Maybe we should just ask the FortiSIEM genie for the answer.

upvoted 0 times

Wilburn

3 months ago

C) Notification engine

upvoted 0 times

...

Marjory

3 months ago

B) Remediation policy

upvoted 0 times

...

William

3 months ago

A) Notification policy

upvoted 0 times

...

Danica

4 months ago

Definitely not C) Notification engine. That sounds like some kind of engine, not a place to configure stuff.

upvoted 0 times

Kati

2 months ago

I think it's B) Remediation policy

upvoted 0 times

...

Mi

2 months ago

D) Remediation engine

upvoted 0 times

...

Dortha

3 months ago

B) Remediation policy

upvoted 0 times

...

Cammy

3 months ago

A) Notification policy

upvoted 0 times

...

Gayla

4 months ago

I think it's a combination of A) Notification policy and C) Notification engine, as policies define the rules and the engine executes them.

upvoted 0 times

...

Catarina

4 months ago

I believe it's C) Notification engine, as that's where the notifications are generated and sent out.

upvoted 0 times

...

Vivan

4 months ago

I agree with Otis, because notifications are usually configured through a notification policy.

upvoted 0 times

...

Noble

4 months ago

Hmm, I'm not so sure. I feel like it might be D) Remediation engine. Isn't that where you configure the actual scripts and actions to take?

upvoted 0 times

Kami

3 months ago

No, I'm pretty sure it's C) Notification engine for setting up automated notifications.

upvoted 0 times

...

Terrilyn

4 months ago

I think it's actually A) Notification policy where you configure rule notifications.

upvoted 0 times

...

Otis

4 months ago

I think the answer is A) Notification policy.

upvoted 0 times

...

Kathrine

4 months ago

Nah, I'm pretty sure it's A) Notification policy. That's where you set up the alerts and notifications for when things go wrong.

upvoted 0 times

...

Von

4 months ago

I think the answer is B) Remediation policy. That's where you configure the automated actions to fix issues, right?

upvoted 0 times

Annamae

3 months ago

Thanks for clarifying. I'll make sure to configure both for complete rule management.

upvoted 0 times

...

Ahmed

3 months ago

Actually, it's both. A) Notification policy is for notifications and B) Remediation policy is for automated remediation.

upvoted 0 times

...

Rene

4 months ago

I always thought it was C) Notification engine for rule notifications.

upvoted 0 times

...

Norah

4 months ago

Yes, you are correct. B) Remediation policy is where you configure automated actions.

upvoted 0 times

...