Review 32 FCP-FSM-AN-7-2 practice questions with answer explanations and community insights.
Question 1
Which statement about thresholds is true?
FortiSIEM uses fixed, hardcoded global and device thresholds for all performance metrics.
FortiSIEM uses only device thresholds for security metrics.
FortiSIEM uses global and per device thresholds for performance metrics.
FortiSIEM uses only global thresholds for performance metrics.
Question 2
Which running mode takes the most time to perform machine learning tasks?
Local auto
Local
Forecasting
Regression
Question 3
Refer to the exhibit. The analyst is troubleshooting the analytics query shown in the exhibit. Why is this search not producing any results?
The Time Range is set incorrectly.
The inner and outer nested query attribute types do not match.
You cannot reference User and Event Type attributes in the same search.
The Boolean operator is wrong between the attributes.
Question 4
Refer to the exhibit. If you group the events by Reporting Device, Reporting IP, and Application Category, how many results will FortiSIEM display?
Four
Five
One
Six
Two
Question 5
Which analytics search can be used to apply a user and entity behavior analytics (UEBA) tag to an event for a failed login by the user JSmith?
User = smith
Username NOT END WITH jsmith
User IS jsmith
Username CONTAIN smit
We are moving to a new platform
CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.