NSE 5 — FortiAnalyzer 7.2 — Question 16

Which statement about sending notifications with incident updates is true?

Answer options

• A. Notifications can be sent only when an incident is created or deleted.
• B. You must configure an output profile to send notifications by email.
• C. Each incident can send notifications to a single external platform.
• D. Each connector used can have different notification settings.

Correct answer: D

Explanation

The correct answer is D because each connector can indeed have its own unique notification settings, allowing for flexibility in how notifications are managed. Option A is incorrect as notifications can be sent for various updates, not just creation or deletion. Option B is false since some systems may allow notifications without an output profile, and option C is wrong because multiple platforms can often be notified from a single incident.