Refer to the exhibit.

An analyst is trying to identify an issue using an expression based on the Expression Builder settings shown in the exhibit; however, the error message shown in the exhibit indicates that the expression is invalid.
What is the correct syntax to create an expression that generates a total count of matched events?
A. Matched Events (COUNT)
B. Matched Events COUNT()
C. (COUNT) Matched Events
D. COUNT(Matched Events)
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
Refer to the exhibit.

If you group the events by User and Count attributes, how many results will FortiSIEM display?
A. Two
B. Six
C. One
D. Three
E. Five
正解:E
解説: (Pass4Test メンバーにのみ表示されます)
質問 3:
Which information can FortiSIEM retrieve from FortiClient EMS through an API connection?
A. FortiSIEM license
B. Host login credentials
C. ZTNA tags
D. Host software versions
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
What are two required components of a rule? (Choose two.)
A. Detection Technology
B. Subpattern
C. Clear policy
D. Exception policy
正解:A,B
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
Refer to the exhibit. What will this analytics search display?

A. Failed login events from all servers in the CMDB
B. Failed login events from all servers in the Server Inventory CMDB report
C. Failed login events from all users in the Logon Failure user group
D. Failed machine login events sourced from servers in the CMDB
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
質問 6:
Refer to the exhibit.

An analyst is troubleshooting the rule shown in the exhibit. It is not generating any incidents, but the filter parameters are generating events on the Analytics tab.
What is wrong with the rule conditions?
A. The Group By attributes restricts which events are counted.
B. The Destination Host Name value is not fully qualified.
C. The Event Type refers to a CMDB lookup and should be an Event lookup.
D. The Aggregate attribute is too restrictive.
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 7:
What feature defines when an incident is created by FortiSIEM?
A. Analytics
B. Cases
C. CMDB
D. Rules
正解:D
969 お客様のコメント





Oda -
FCP_FSM_AN-7.2独学者はぜひ参考にしたい内容だなって実感しました。メリハリよくFCP_FSM_AN-7.2を学習することができます。