NSE6_FSM_AN-7.4 무료 덤프문제 온라인 액세스

Refer to the exhibit.

An analyst is troubleshooting the rule shown in the exhibit. It is not generating any incidents, but the filter parameters are generating events on the Analytics tab.
What is wrong with the rule conditions?

• A.The Destination Host Name value is not fully qualified.
• B.The Aggregate attribute is too restrictive.
• C.The Event Type refers to a CMDB lookup and should be an Event lookup.
• D.The Group By attributes restricts which events are counted.

What are two required components in a rule? (Choose two.)

• A.Tag
• B.Subpattern
• C.Clear policy
• D.Detection technology

Refer to the exhibit. Why are some of the fields highlighted in red?

• A.The Event Receive Time attribute is a valid choice to sort by.
• B.The attribute COUNT(Matched Events) is an invalid expression.
• C.Multiple unique values cannot be grouped.
• D.No Raw Event Log attribute information is available.

Refer to the exhibit.

If you group these events by the User and Count attributes, how many unique results will FortiSIEM display?

• A.Three
• B.Five
• C.Six
• D.Four

Refer to the exhibit.

Which statement about the nested query shown in the exhibit is true?

• A.The outer query could have referenced all the queried fields from the inner query.
• B.The outer query could have also referenced the Reporting IP address field from the inner query.
• C.The outer query could have also referenced the Protocol field from the inner query.
• D.The outer query should have used the operator CONTAINS when referencing the inner query.