Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet FCP_FAZ_AN-7.6 Exam - Topic 1 Question 16 Discussion

As part of your analysis, you discover that a Medium severity level incident is fully remediated.You change the incident status to Closed:Remediated.Which statement about your update is true?
C) The incident dashboard will be updated.
A) The incident can no longer be deleted.
B) The corresponding event will be marked as Mitigated.
D) The incident severity will be lowered.

Fortinet FCP_FAZ_AN-7.6 Exam - Topic 1 Question 16 Discussion

Actual exam question for Fortinet's FCP_FAZ_AN-7.6 exam
Question #: 16
Topic #: 1
[All FCP_FAZ_AN-7.6 Questions]

As part of your analysis, you discover that a Medium severity level incident is fully remediated.

You change the incident status to Closed:Remediated.

Which statement about your update is true?

Show Suggested Answer Hide Answer
Suggested Answer: C

Study Guide p.102-p.106: incident charts and status tracking help analysts prioritize and manage incident lifecycle changes.

Technical Deep Dive: The correct answer is C. When an incident is closed as remediated, the incident dashboard and incident status views reflect the updated lifecycle state. FortiAnalyzer keeps incidents visible for tracking and audit unless an administrator deletes them separately. The corresponding event is not automatically rewritten as Mitigated simply because the incident is closed. Incident severity is not automatically lowered by changing status; severity and status are separate incident attributes.


Contribute your Thoughts:

0/2000 characters
Sabine
3 days ago
I thought closed incidents could still be deleted, though?
upvoted 0 times
...
Geraldine
8 days ago
B is correct, it gets marked as Mitigated.
upvoted 0 times
...
Kristofer
13 days ago
Wait, are you sure the severity changes? That seems off.
upvoted 0 times
...
Arlie
18 days ago
I agree, the dashboard should definitely update!
upvoted 0 times
...
Ivette
24 days ago
The incident can still be deleted if needed.
upvoted 0 times
...
Terry
29 days ago
I thought once an incident is closed, it can't be deleted, but I don't remember if that's true for all severity levels.
upvoted 0 times
...
Evangelina
1 month ago
I feel like marking the incident as Closed:Remediated might mean the event is mitigated, but I need to double-check that.
upvoted 0 times
...
Keneth
1 month ago
I remember a practice question where changing the status affected the severity, but I can't recall if it was for incidents or events.
upvoted 0 times
...
Aretha
1 month ago
I think the incident dashboard will be updated, but I'm not completely sure if that's automatic or if we need to refresh it manually.
upvoted 0 times
...

Save Cancel