Exam NSE6_FSM_AN-7.4 Topic 1 Question 61 Discussion

Actual exam question for Fortinet's NSE6_FSM_AN-7.4 exam
Question #: 61
Topic #: 1
Refer to the exhibits.



You are troubleshooting why the rule shown in the exhibit is generating incidents for successful Remote Desktop Protocol (RDP) connections with correct logins. It should only be triggering when a person fails a login three or more times to the target device when connecting with RDP.
What is causing the rule to be triggered by correct login events?

Suggested Answer: D Vote an answer

The rule uses OR between the RDP connection subpattern and the failed logon subpattern, so either subpattern can trigger the rule independently. This allows successful RDP connection events to generate incidents even when the failed logon condition is not met.

by Bradley at Oct 15, 2026, 03:00 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10