Câu 12: NSE7_OTS-6.4: Fortinet NSE 7 - OT Security 6.4

An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM. Which step must the administrator take to achieve this task?

1. A. Configure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.
2. B. Create a notification policy and define a script/remediation on FortiSIEM. — đáp án hiện tại
3. C. Define a script/remediation on FortiManager and enable a notification rule on FortiSIEM.
4. D. Deploy a mitigation script on Active Directory and create a notification policy on FortiSIEM.