Configuring Event Notifications and Alerts

Play an AI-generated podcast conversation about this lesson

Which systems can be used to send notifications when a match is found in the logs?

Email only

SNMP traps only

Fabric connector only

All of the above (correct)

What is the purpose of setting up the back end for notification methods?

To configure the email server (correct)

To configure the notification settings

To configure the event handler

To configure the event status

What does the 'Contained' event status indicate?

Other scenarios

The security risk is mitigated by being blocked or dropped

The security event risk is not mitigated or contained

The risk source is isolated (correct)

Which event status indicates that the security event risk is not mitigated or contained?

Unhandled Signup and view all the answers

How can event handlers send notifications to other systems?

By including event information in notifications Signup and view all the answers

What is the purpose of configuring the desired event status in the handler settings?

To choose the appropriate notification method Signup and view all the answers

Which event status indicates that the security risk is mitigated by being blocked or dropped?

Mitigated Signup and view all the answers

What is the purpose of event notifications in FortiAnalyzer?

To send notifications to other systems Signup and view all the answers

What is the purpose of the 'Blank' event status?

To represent other scenarios Signup and view all the answers

Which of the following is NOT a possible status for events in FortiAnalyzer?

Open Signup and view all the answers

Which action can be taken for an event in the Event Monitor?

Add a comment Signup and view all the answers

What format is used to save exported event handlers?

JSON Signup and view all the answers

How can you reuse event handlers in a different A-dom?

Export and import them Signup and view all the answers

What type of actions can be performed on an event in the Event Monitor?

Acknowledge, comment, assign, create incident Signup and view all the answers

What does acknowledging an event in the Event Monitor do?

Removes it from the event list Signup and view all the answers

What does the Mitigated status indicate for a security risk?

The risk has been reduced or eliminated Signup and view all the answers

What can be seen in the All Events view?

All events combined Signup and view all the answers

What should be given priority when managing events?

Events with unhandled status and/or critical severity Signup and view all the answers

What should be done with mitigated events?

They can be acknowledged Signup and view all the answers

What type of format should be chosen when exporting an event handler if you need to read the file in plaintext?

Text Signup and view all the answers