Exam NSE7_OTS-6.4 topic 1 question 18 discussion

FortiSiem

should be B

Remediation can be performed either on an ad-hoc basis (for example, the user selects an incident that has already occurred to remediate) or using a notification policy, where the system takes the remediation action when incident happens. First, make sure the remediation script for your scenario is defined. Check the existing remediation scripts in ADMIN > Settings > General > Notification > Remediation settings. If your device is not in the list, add the needed remediation script. Incidents can be mitigated by deploying a mitigation script. For example, you can block an IP in a firewall, or disable a user in active directory. Note that this type of incident mitigation from the incident page is somewhat ad hoc and must be manually setup by the user after the incident has triggered.

B. https://fusecommunity.fortinet.com/blogs/silviu/2022/04/12/fortisiempublishingscript

This should be B, study guide page 226

Should this not be B