View all questions & answers for the FCSS - Security Operations 7.6 Architect Exam Materials exam


Question 11 Discussion

Which two ways can you create an incident on FortiAnalyzer? (Choose two answers)

  • A. Using a custom event handler
  • B. Using a connector action
  • C. Manually, on the Event Monitor page
  • D. By running a playbook
Correct Answer: C,D

Brave-Dump Clients Votes

AC 100%

Comments



gerardo echeto 2025-09-05 12:42:16

Selected Answers: A, C


D. By running a playbook: A playbook is the automation framework that uses connector actions to perform a sequence of tasks, and one of those tasks can be to create an incident. Therefore, a playbook is the orchestrator, and the "Create Incident" action is the specific step, but it is not a direct, standalone method in the same way as a manual creation or an event handler's built-in capability. The playbook is a higher-level process that initiates the creation, rather than the creation method itself.