최신 NSE6_FSM_AN-7.4 무료덤프 - Fortinet NSE 6

문제1

In an automation policy, which two methods can you use to notify analysts when an incident is triggered? (Choose two.)

A. Pop-up window

B. FortiSIEM Case

C. Email

D. Syslog

정답: B,C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Refer to the exhibit. Which value will the FortiSIEM parser use to populate the Application Name field?

A. Network.Service: SSL

B. Network Service

C. Network.Service

D. SSL

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Refer to the exhibits.

Three events are collected over 10 minutes from two servers: Server A and Server B.
Based on the settings for the rule subpattern and a 10-minute condition window, how many incidents will the servers generate?

A. Server A will generate one incident and Server B will not generate any incidents.

B. Server A will not generate any incidents and Server B will not generate any incidents.

C. Server A will not generate any incidents and server B will generate one incident.

D. Server A will generate one incident and Server B will generate one incident.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Refer to the exhibit. What is this rule attempting to match?

A. Failed VPN logon events from a source outside the home country.

B. Excessive VPN logon failures from a source inside the home country.

C. Failed VPN logon attempts from three or more different outside countries.

D. Failed VPN logon attempts from three or more different sources inside the home country.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

When using user and entity behavior analytics (UEBA) on FortiSIEM, what can you use to dynamically supply a list of suspicious IP addresses to FortiGate for blocking?

A. FortiSIEM watchlists

B. FortiSIEM lookup tables

C. The Fortinet Security Fabric

D. Secure Copy Protocol (SCP)

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Refer to the exhibits.

You want the rule shown in the exhibit to trigger when three failed login attempts occur within 3 minutes.
Which condition time window and aggregate values are correct for your objective?

A. Time window 540 seconds, aggregate value 3

B. Time window 180 seconds, aggregate value 2

C. Time window 180 seconds, aggregate value 3

D. Time window 60 seconds, aggregate value 3

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제7

When selecting multiple rules at once on FortiSIEM, which actions can you perform?

A. You can only activate or deactivate multiple rules at a time.

B. You can only change the severity of multiple rules at a time.

C. You can change the severity, activate, or deactivate multiple rules at a time.

D. You can view, edit, or activate only one rule at a time

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Refer to the exhibit. If you group the events by Reporting IP, Event Type, and User attributes, how many results will FortiSIEM display?

A. Four

B. Two

C. Five

D. Three

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제9

When using user and entity behavior analytics (UEBA) on FortiSIEM, what must you use to dynamically supply a list of IP addresses to a FortiGate device for blocking purposes?

A. API Connection

B. SCP

C. Lookup tables

D. Watchlists

정답: D

문제10

Refer to the exhibit.

An analyst is troubleshooting the rule shown in the exhibit. It is not generating any incidents, but the filter parameters are generating events on the Analytics tab.
What is wrong with the rule conditions?

A. The Group By attributes restricts which events are counted.

B. The Destination Host Name value is not fully qualified.

C. The Event Type refers to a CMDB lookup and should be an Event lookup.

D. The Aggregate attribute is too restrictive.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

최신 NSE6_FSM_AN-7.4 무료덤프 - Fortinet NSE 6 - FortiSIEM 7.4 Analyst

우리와 연락하기

유용한 링크

최신 업데이트