최신Fortinet FCP - FortiSIEM 7.2 Analyst - FCP_FSM_AN-7.2무료샘플문제
문제1
Where must you define and assign a custom python script as a remediation action?
Where must you define and assign a custom python script as a remediation action?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제2
Refer to the exhibit.
What will happen when a device being analyzed by the machine learning configuration shown in the exhibit has a consistently high memory utilization?
Refer to the exhibit.
What will happen when a device being analyzed by the machine learning configuration shown in the exhibit has a consistently high memory utilization?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제3
Refer to the exhibit.
An analyst is troubleshooting the rule shown in the exhibit. It is not generating any incidents, but the filter parameters are generating events on the Analytics tab.
What is wrong with the rule conditions?
Refer to the exhibit.
An analyst is troubleshooting the rule shown in the exhibit. It is not generating any incidents, but the filter parameters are generating events on the Analytics tab.
What is wrong with the rule conditions?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제4
Which two settings must you configure to allow FortiSIEM to apply tags to devices in FortiClient EMS? (Choose two.)
Which two settings must you configure to allow FortiSIEM to apply tags to devices in FortiClient EMS? (Choose two.)
정답: A,B
설명: (ExamPassdump 회원만 볼 수 있음)
문제5
Which information can FortiSIEM retrieve from FortiClient EMS through an API connection?
Which information can FortiSIEM retrieve from FortiClient EMS through an API connection?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제6
What are two required components of a rule? (Choose two.)
What are two required components of a rule? (Choose two.)
정답: B,C
설명: (ExamPassdump 회원만 볼 수 있음)
문제7
Refer to the exhibit.
A FortiSIEM device is receiving syslog events from a FortiGate firewall. The FortiSIEM analyst is trying to search the raw event logs for the last two hours that contain the keyword "udp".
However, they are getting no results from the search, which they know should be available.
Based on the filter shown in the exhibit, why are there no search results?
Refer to the exhibit.
A FortiSIEM device is receiving syslog events from a FortiGate firewall. The FortiSIEM analyst is trying to search the raw event logs for the last two hours that contain the keyword "udp".
However, they are getting no results from the search, which they know should be available.
Based on the filter shown in the exhibit, why are there no search results?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)