NSE6_FSM_AN-7.4 試験問題を無料オンラインアクセス

Refer to the exhibit. If the Capture Variable step ingests the source IP address from an incident and the Block Source IP on FGT step blocks that source IP address on the configured firewall, what will happen when this playbook is executed?

• A.A different source IP address, depending on the organization, will be blocked on all three firewalls.
• B.Three different source IP addresses, depending on the network configuration of the firewalls, will be blocked.
• C.A single source IP address from the incident will be blocked on the first playbook connector.
• D.The same source IP address will be blocked on all three firewalls.

Refer to the exhibit. Which event type attribute value will the FortiSIEM parser save for this event?

• A.PH_DEV_MON_SYS_UPTIME
• B.PHL_INFO
• C.sysUpTime
• D.phLogDetail

How can you use the configuration management database (CMDB) in an analytics search?

• A.Perform an AI-assisted analytics search using devices defined in the CMDB.
• B.Match passwords defined in the CMDB to look for suspicious logins.
• C.Use devices defined in the CMDB as source IP addresses.
• D.Use device IP addresses defined in the CMDB to perform an nmap analytics scan.

In FortiSIEM, which database stores discovery information?

• A.CMDB
• B.Profile DB
• C.Event DB
• D.SVN DB

Refer to the exhibit. When the subpattern is matched, what does the time condition of 60 seconds mean?

• A.It is the time period over which the rule will aggregate and evaluate events.
• B.The rule engine will evaluate events every 60 seconds looking for the subpattern.
• C.The rule will trigger remediation actions every 60 seconds when the subpattern is triggered.
• D.The subpattern must be matched at least twice within 60 seconds to trigger this rule.