What option is available to the administrator?

Refer to the exhibit.

An administrator wants to remediate the incident from FortiSIEM shown in the exhibit.

What option is available to the administrator?
A . Quarantine IP FortiClient
B. Run the block MAC FortiOS.
C. Run the block IP FortiOS 5.4
D. Run the block domain Windows DNS

Answer: C

Explanation:

The incident from FortiSIEM shown in the exhibit is a brute force attack on a FortiGate device. The remediation option available to the administrator is to run the block IP FortiOS 5.4 action, which will block the source IP address of the attacker on the FortiGate device using a firewall policy.

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments