How can you invoke an integration policy on FortiSIEM rules?

How can you invoke an integration policy on FortiSIEM rules?
A . Through Notification Policy settings
B. Through Incident Notification settings
C. Through remediation scripts
D. Through External Authentication settings

Answer: A

Explanation:

You can invoke an integration policy on FortiSIEM rules by configuring the Notification Policy settings. You can select an integration policy from the drop-down list and specify the conditions for triggering it. For example, you can invoke an integration policy when an incident is created, updated, or closed.

Reference: Fortinet NSE 7 – Advanced Analytics 6.3 Exam Description, page 9

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments