Fortinet Certified Professional: FortiAnalyzer 7.6 Analyst & Administrator (NSE 5) Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C0

  - Comprehensive and Detailed Explanation From Exact Extract of knowledge of FortiAnalyzer 7.6 Study guide documents: The exhibit shows the event Event Status = Mitigated and Event Type = Web Filter, with the event message indicating the web request was blocked. The study guide defines Mitigated events as follows: "Mitigated: The security risk is mitigated by being blocked or dropped." This means a mitigated status corresponds to enforcement that prevented the risk (block/drop), not a condition where the source is isolated. It also distinguishes Contained events from mitigated ones: "Contained: The risk source is isolated." Since the exhibit clearly shows Mitigated (not Contained), option B is incorrect. Additionally, the study guide notes: "Generally, you can acknowledge mitigated events because the related traffic was blocked by the firewall." This aligns directly with the exhibit's "blocked" wording and supports that the correct interpretation is that the security risk was blocked. Finally, the event type displayed is Web Filter, not application control, so option D is incorrect. Therefore, the correct statement is C. The security risk was blocked.