NSE6_FSM_AN-7.4 무료 덤프문제 온라인 액세스

Which two categories can you map to the MITRE ATT&CK coverage tables on FortiSIEM?
(Choose two.)

• A.Incidents
• B.CMDB Entries
• C.Threats
• D.Rules
• E.Procedures

In an automation policy, which two methods can you use to notify analysts when an incident is triggered? (Choose two.)

• A.Email
• B.Pop-up window
• C.FortiSIEM Case
• D.Syslog

What are two required components in a rule? (Choose two.)

• A.Tag
• B.Subpattern
• C.Detection technology
• D.Clear policy

Refer to the exhibit. Which two actions can you select in an automation policy to trigger an API call to block an IP address on a FortiGate? (Choose two.)

• A.Open Remedy ticket using the configuration set in
• B.Run Playbook on Incident Trigger
• C.Invoke an Integration Policy
• D.Run Remediation/Script
• E.Send Email/SMS/Webhook to the target users

An analyst wants to create a rule from a newly created analytics search. What is the quickest method?

• A.On the Analytics tab, click the New button next to the Filter By box.
• B.Create a new rule under Resources > Rules and fill in the search details.
• C.On the upper menu bar on any tab, click the pencil icon.
• D.On the Analytics tab, click Actions > Create Rule.