NSE 5 – FortiSIEM 5.2 — Question 13

What are the four possible incident status values?

Answer options

• A. Active, dosed, cleared, open
• B. Active, cleared, cleared manually, system cleared
• C. Active, closed, manual, resolved
• D. Active, auto cleared, manual, false positive

Correct answer: C

Explanation

The correct answer is C because it accurately lists the standard incident status values used in incident management, which include 'Active', 'Closed', 'Manual', and 'Resolved'. The other options contain incorrect or non-standard terms that do not represent recognized incident statuses.