What is the disadvantage of automatic remediation?
A.
It can make a disruptive change to a user, block access to an application, or disconnect critical systems from the network.
B.
External threats or attacks detected by FortiSIEM will need user interaction to take action on an already overworked SOC team.
C.
It is equivalent to running an IPS in monitor-only mode-watches but does not block.
D.
Threat behavior occurring during the night could take hours to respond to.
The Answer Is:
A
This question includes an explanation.
Explanation:
Automatic remediation inFortiSIEMenablesreal-time responseto security threats without manual intervention. While this can improve response times, it also introducesrisksbecauseactions are taken automatically based on predefined rules, without human verification.
● Automated responsescould mistakenly block legitimate usersfrom critical systems or applications.
●Misconfigured rulesmightdisconnect essential systems, causing business disruptions.
● If an incident isa false positive,automatic remediation may interfere with normal operationsunnecessarily.
FCSS_ADA_AR-6.7 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"