FCP – FortiAnalyzer Analyst 7.6 — Question 36

As part of your analysis, you discover that a Medium severity level incident is fully remediated.

You change the incident status to Closed: Remediated.

How will FortiAnalyzer handle this incident?

Answer options

• A. The corresponding event will be marked as Mitigated
• B. The incident will be deleted from the incident queue
• C. The incidents dashboards will be updated
• D. The incident severity will be nullified

Correct answer: C

Explanation

When an incident is marked as Closed: Remediated, FortiAnalyzer updates the incident dashboards to reflect this change, ensuring that all stakeholders have access to the most current information. The other options are incorrect because the event is not simply mitigated, the incident is not deleted, and the severity does not get nullified.