NSE6_FSM_AN-7.4

Review 65 NSE6-FSM-AN-7-4 practice questions with answer explanations and community insights.

Question 1

Which data collection method generates the most comprehensive information for FortiSIEM user entity and behavior analytics (UEBA) models?

  1. FortiSIEM Linux agent
  2. Windows UEBA agent
  3. Windows Sysmon
  4. Linux log

Question 2

When selecting multiple rules at once on FortiSIEM, which actions can you perform?

  1. You can change the severity, activate, or deactivate multiple rules at a time.
  2. You can view, edit, or activate only one rule at a time
  3. You can only activate or deactivate multiple rules at a time.
  4. You can only change the severity of multiple rules at a time.

Question 3

Refer to the exhibit.Which event type attribute value will the FortiSIEM parser save for this event?

  1. sysUpTime
  2. PH_DEV_MON_SYS_UPTIME
  3. phLogDetail
  4. PHL_INFO

Question 4

Refer to the exhibit.If you group these events by the Reporting IP, Event Type, and User attributes, how many results will FortiSIEM display?

  1. Five
  2. Two
  3. Six
  4. Three

Question 5

Refer to the exhibit.Which two items can be referenced in the incident details when this rule is triggered and creates an incident? (Choose two.)

  1. User
  2. Reporting Device
  3. Domain Account Lockout
  4. Event Type
  5. COUNT(Matched Events)
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.