FCP_FSM_AN-7.2

FCP_FSM_AN-7.2 practice questions, page 2 of 2, with answer review and explanations.

Question 6

Refer to the exhibit. An analyst is trying to generate an incident with a title that includes the Source IP, Destination IP, User, and Destination Host Name. They are unable to add a Destination Host Name as an incident attribute. What must be changed to allow the analyst to select Destination Host Name as an attribute?

  1. The Destination Host Name must be selected as a Triggered Attribute.
  2. The Destination Host Name must be set as an aggregate item in a subpattern.
  3. The Destination Host Name must be added as an Event type in the FortiSIEM.
  4. The Destination IP Event Attribute must be removed.