Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?

FortiAnalyzer offers several features for monitoring, alerting, and incident management, each

serving different purposes. Let's examine each option to determine which one best supports a

proactive security approach.

Option A - FortiView Monitor:

FortiView is a visualization tool that provides real-time and historical insights into network traffic,

threats, and logs. While it gives visibility into network activity, it is generally more reactive than

proactive, as it relies on existing log data and incidents.

Conclusion: Incorrect.

Option B - Outbreak Alert Services:

Outbreak Alert Services in FortiAnalyzer notify administrators of emerging threats and outbreaks

based on FortiGuard intelligence. This is beneficial for awareness of potential threats but does not

offer a hands-on, investigative approach. It’s more of a notification service rather than an active,

proactive investigation tool.

Conclusion: Incorrect.

Option C - Incidents Dashboard:

The Incidents Dashboard provides a summary of incidents and current security statuses within the

network. While it assists with ongoing incident response, it is used to manage and track existing

incidents rather than proactively identifying new threats.

Conclusion: Incorrect.

Option D - Threat Hunting:

Threat Hunting in FortiAnalyzer enables security analysts to actively search for hidden threats or

malicious activities within the network by leveraging historical data, analytics, and intelligence. This

is a proactive approach as it allows analysts to seek out threats before they escalate into incidents.

Conclusion: Correct.

Conclusion:

Correct Answe r : D. Threat hunting

Threat hunting is the most proactive feature among the options, as it involves actively searching for

threats within the network rather than reacting to already detected incidents.

Reference:

FortiAnalyzer 7.4.1 documentation on Threat Hunting and proactive security measures.