nse5_faz-72 Exam QuestionsBrowse all questions from this exam

nse5_faz-72 Exam - Question 7


Refer to the exhibits.

How many events will be added to the incident created after running this playbook?

Show Answer
Correct Answer: D

Based on the given exhibits, the filter in the playbook runs a query to match all conditions: Severity == Medium, Event Type == IPS, and Tag == Intrusion. From the Event Status list, there are ten entries that meet these criteria.

Discussion

5 comments
Sign in to comment
r_jordanOption: D
Dec 15, 2023

D is correct

myrmidon3Option: D
Feb 22, 2024

D is correct.

rian00z_Option: D
Apr 5, 2024

D is correct

Halmonte0780Option: D
May 19, 2024

Match all conditions: Intrusion + IPS + Medium: 10

DidesouzadsOption: D
May 22, 2024

The events you need to count are according from the match criteria "Medium, IPS and Intrusion"