FCP_FSM_AN-7.2 試験問題を無料オンラインアクセス

Which items are used to define a subpattern?

• A.Filters, Group By, Threshold definitions
• B.Filters, Aggregate, Time Window definitions
• C.Filters, Aggregate, Group By definitions
• D.Filters, Threshold, Time Window definitions

Refer to the exhibit. What will FortiSIEM display if you apply the Group By and Display Fields configuration to a list of allowed firewall connections?

• A.A list of connections ordered by destination IP address hit count
• B.A list of connections between unique source and destination IP addresses
• C.A list of connections ordered by the number of unique connections started by each source IP address
• D.A running count of connections, regardless of source or destination

How can you query the configuration management database (CMDB) in an analytics search?

• A.On the Admin tab, click CMDB Search.
• B.Click Attribute > Select from CMDB.
• C.Click Value > Select from CMDB.
• D.On the CMDB tab, select an entry, and then click Create Search.

Refer to the exhibit.

An analyst is trying to identify an issue using an expression based on the Expression Builder settings shown in the exhibit; however, the error message shown in the exhibit indicates that the expression is invalid.
What is the correct syntax to create an expression that generates a total count of matched events?

• A.Matched Events (COUNT)
• B.Matched Events COUNT()
• C.(COUNT) Matched Events
• D.COUNT(Matched Events)

Refer to the exhibit.

Which value would you expect the FortiSIEM parser to use to populate the Application Name field?

• A.SSL
• B.Network.Service
• C.applist
• D.wan1