FCP_FSM_AN-7.2 Exam Dumps - Fortinet Certified Professional Security Operations Questions and Answers

No notification is sent.

An email is sent to the SOC manager.

The remediation script is run.

A notification is sent to the SOC manager dashboard.

Associated source IP addresses will be blocked on devices in the Aviation organization.

Associated source IP addresses will be blocked on all FortiGate firewalls.

Associated source IP addresses will be blocked on devices in the Network CMDB group.

Associated source IP addresses will be blocked on two FortiGate firewalls.

Unique values cannot be grouped

The attribute COUNT(Matched Events) is an invalid expression.

No RAW Event Log attribute information is available.

The Event Receive Time attribute is not available for logs.

LDAP Query

CMDB Query

SNMP Query

Event Query

The analyst manually cleared the incident from the incident table.

FortiSIEM cleared the incident automatically after 24 hours.

The incident was cleared automatically by the rule.

The endpoint was rebooted and sent an all-clear signal to FortiSIEM.

Design

Schedule

Prepare Data

Train

Local auto

Local

Forecasting

Regression

The Time Range is set incorrectly.

The inner and outer nested query attribute types do not match.

You cannot reference User and Event Type attributes in the same search.

The Boolean operator is wrong between the attributes.

User = smith

Username NOT END WITH jsmith

User IS jsmith

Username CONTAIN smit