最新のNSE6_FSM_AN-7.4問題集で試験を準備する

Fortinet NSE6_FSM_AN-7.4 試験概要:

Fortinet NSE6_FSM_AN-7.4 試験シラバストピック:

Fortinet NSE 6 - FortiSIEM 7.4 Analyst 認定 NSE6_FSM_AN-7.4 試験問題：

問題 #1

Refer to the exhibit.

What is the Group: VPN Gateway value a reference to?

A. A FortiSIEM watchlist
B. A configuration management database (CMDB) device group
C. A FortiSIEM rule folder
D. A FortiGate address group

問題 #2

Refer to the exhibit. Which two items can be referenced in the incident details when this rule is triggered and creates an incident? (Choose two.)

A. Event Type
B. COUNT(Matched Events)
C. Reporting Device
D. Domain Account Lockout
E. User

問題 #3

You want to reference the first source IP address from an incident in a playbook. Which option shows the correct Jinja syntax for using a variable for the source IP address in a FortiSIEM playbook?

A. srcIpAddr.records[0]
B. record(srcIpAddr)
C. vars.input.records[0].srcIpAddr
D. srcIpAddr(1)

問題 #4

An analyst wants to run a remediation playbook when a user fails a VPN login five times from an external machine. Where do they associate the remediation playbook with the triggering rule?

A. In an automation policy
B. In an incident policy
C. In the associated playbook under Remediation
D. In the associated rule under Action

問題 #5

Refer to the exhibit.

FortiSIEM is receiving syslog events from a firewall.
You are trying to search raw event logs for traffic from the last two hours that contain the keyword
"UDP". However, you are getting no results from the search.
Based on the filter shown in the exhibit, why are you getting no search results?

A. You are using udp in the Value field, but you must use UDP.
B. The AND operator in the Next column is the wrong operator for this type of search.
C. The = operator in the Operator column is the wrong operator for this type of search.
D. You can perform raw event log searches using only an Event Keyword search.

解説：