FCSS_LED_AR-7.6 Web TestEngine demo

Refer to the exhibits.

\

Examine the FortiGate configuration, FortiAnalyzer logs, and FortiGate widget shown in the exhibits.

Security Fabhc quarantine automation has been configured to isolate compromised devices automatically.
FortiAnalyzer has been added to the Security Fabric, and an automation stitch has been configured to quarantine compromised devices.

To test the setup, a device with the IP address 10.0.2.1 that is connected through a managed FortiSwitch attempts to access a malicious website. The logs on FortiAnalyzer confirm that the event was recorded, but the device does not appear in the FortiGate quarantine widget.

Which two reasons could explain why FortiGate is not quarantining the device? (Choose two.)

Select all that apply.

• A

  The IOC action should include only the FortiSwitch in the quarantine.

• B

  The SSL inspection should be set to deep-Inspection

• C

  The malicious website is not recognized as an indicator of compromise (IOC) by FortiAnalyzer.

• D

  The threat detection services license is missing or invalid under FortiAnalyzer.