Fortinet FCP - FortiSIEM 7.2 Analyst - FCP_FSM_AN-7.2 模擬練習
Which information can FortiSIEM retrieve from FortiClient EMS through an API connection?
正解: B
解説: (PassTest メンバーにのみ表示されます)
When FortiSIEM is configured to apply ZTNA tags, what is the order of events when an analyst wants to automatically block a ZTNA tagged host?
正解: A
解説: (PassTest メンバーにのみ表示されます)
Refer to the exhibit. Which value would be saved as the Event Type attribute by the default FortiSIEM parser?


正解: B
解説: (PassTest メンバーにのみ表示されます)
Refer to the exhibit.

Which section contains the subpattern configuration that determines how many matching events are needed to trigger the rule?

Which section contains the subpattern configuration that determines how many matching events are needed to trigger the rule?
正解: B
解説: (PassTest メンバーにのみ表示されます)
You need a model for predicting a target field based on other fields in a dataset and then trigger an anomaly if the value does not match the prediction. Which machine learning algorithm will build this type of model?
正解: D
解説: (PassTest メンバーにのみ表示されます)
Where must you define and assign a custom python script as a remediation action?
正解: B
解説: (PassTest メンバーにのみ表示されます)
Refer to the exhibit.

Which two conditions will match this rule and subpatterns? (Choose two.)

Which two conditions will match this rule and subpatterns? (Choose two.)
正解: A,D
解説: (PassTest メンバーにのみ表示されます)