<< Prev Question Next Question >>

Question 9/12

An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM.
Which step must the administrator take to achieve this task?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *