Fortinet FCP - FortiSIEM 7.2 Analyst - FCP_FSM_AN-7.2 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Refer to the exhibit.

If you group the events by User and Count attributes, how many results will FortiSIEM display?

A. Six B. Five C. Two D. One E. Three

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

From which two sources can you import data to train FortiSIEM machine learning? (Choose two.)

A. Syslog archives B. SQL database C. CSV files D. FortiSIEM reports

Discussion 0

Correct Answer: C,D Vote an answer

Question 3

Refer to the exhibit. What is the Group: VPN Gateway value referring to?

A. A CMDB device group B. A FortiGate address group C. An authentication user group D. A watchlist

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit. The analyst is troubleshooting the analytics query shown in the exhibit.

Why is this search not producing any results?

A. You cannot reference User and Event Type attributes in the same search. B. The Time Range is set incorrectly. C. The inner and outer nested query attribute types do not match. D. The Boolean operator is wrong between the attributes.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit. Which section contains settings that determine which attribute associations are used to trigger an incident?

A. Filters B. Name C. Group By D. Aggregate

Discussion 0

Correct Answer: C Vote an answer

Question 6

An analyst wants to create a rule from a newly created analytics search. What is the quickest method?

A. On the Analytics tab, click the New button next to the Filter By box. B. Create a new rule under Resources > Rules and fill in the search details. C. On the upper menu bar on any tab, click the pencil icon. D. On the Analytics tab, click Actions > Create Rule.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

The exhibit shows the configuration for a machine learning dataset using anomaly detection.
If the report generating the data being analyzed is run every hour, how long must the FortiSIEM device be up before a valid training set can be produced?

A. 24 hours B. 30 hours C. 3 hours D. 10 hours

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).