Câu 2: FCP_FSM_AN-7.2: FCP - FortiSIEM 7.2 Analyst

How does FortiSIEM update the incident table if a performance rule triggers repeatedly?

1. A. FortiSIEM changes the incident status to Repeated, and updates the Last Seen timestamp.
2. B. FortiSIEM updates the Incident Count value and Last Seen timestamp. — đáp án hiện tại
3. C. FortiSIEM generates a new incident based on the Rule Frequency value, and updates the First Seen and Last Seen timestamps.
4. D. FortiSIEM generates a new incident each time the rule triggers, and updates the First Seen and Last Seen timestamps.