FCP – FortiAnalyzer Analyst 7.4 — Question 11

Which statement about sending notifications with incident updates is true?

Answer options

• A. Notifications can be sent only when an incident is created or deleted.
• B. Each incident can send notifications to a single external platform.
• C. Each connector used can have different notification settings.
• D. You must configure an output profile to send notifications by email.

Correct answer: C

Explanation

The correct answer is C because each connector can indeed have its own unique notification settings, allowing for flexibility in how notifications are managed. Options A and B are incorrect as notifications can be sent for various updates, not just creation or deletion, and incidents can notify multiple platforms. Option D is also wrong since configuring an output profile is not mandatory for sending notifications by email.