FCSS_SOC Question 41

Question

You want FortiSIEM to automatically add three zero trust network access (ZTNA) tags to a device when that device triggers a custom rule. You want FortiSIEM to push these ZTNA tags to multiple FortiClient EMS servers in the organization. How can you accomplish this?
A. Create a syslog connection from the FortiClient EMS servers to retrieve ZTNA tag information from FortiSIEM.
B. Create multiple playbooks, one for each FortiClient EMS server, each with a connector for a ZTNA tag.
C. Create a single playbook with multiple connectors, one for each FortiClient EMS.
D. Create multiple automation policies, each one pushing a tag to a different FortiClient EMS server.

Accepted Answer

Marked answer: C. Create a single playbook with multiple connectors, one for each FortiClient EMS.

FCSS_SOC Question 41

Community Discussion

Preparing Practice Exam…

FCSS_SOC Question 41

Community Discussion