NSE 7 – FortiADC 6.3 — Question 23

What is the disadvantage of automatic remediation?

Answer options

• A. It can make a disruptive change to a user, block access to an application, or disconnect critical systems from the network.
• B. It is equivalent to running an IPS in monitor-only mode — watches but does not block.
• C. External threats or attacks detected by FortiSIEM will need user interaction to take action on an already overworked SOC team.
• D. Threat behaviors occurring during the night could take hours to respond to.

Correct answer: A

Explanation

Answer A is correct because automatic remediation can lead to significant disruptions for users and critical systems, which is a major concern in operational environments. Options B, C, and D describe different issues related to security monitoring and response, but they do not directly address the disruptive nature of automatic remediation.