Exam NSE6_FSM_AN-7.4 Topic 1 Question 8 Discussion
Actual exam question for Fortinet's NSE6_FSM_AN-7.4 exam
Question #: 8
Topic #: 1
Question #: 8
Topic #: 1
Refer to the exhibit. What is this rule attempting to match?


Suggested Answer: D Vote an answer
The rule matches VPN logon failure events where the Source Country is not part of the GeoCountries group named My Home. The aggregate condition requires at least three matching events grouped by Source IP and User, identifying repeated failed VPN logon attempts from a source outside the home country.
by John at Oct 13, 2026, 02:18 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).