Free Fortinet FCP_FSM_AN-7.2 Exam Dumps Questions & Answers

Which information can FortiSIEM retrieve from FortiClient EMS through an API connection?

• A.  Host software versions
• B.  FortiSIEM license
• C.  Host login credentials
• D.  ZTNA tags

Refer to the exhibit.

According to the automation policy configuration shown in the exhibit, what happens if an associated rule triggers?

• A.  FortiSIEM fails to the integration policy, because no policy is defined.
• B.  FortiSIEM sends an email, because that is first on the list.
• C.  FortiSIEM performs all selected actions.
• D.  FortiSIEM runs the remediation script, because that takes precedence over all other options.

How does FortiSIEM update the incident table if a performance rule triggers repeatedly?

• A.  FortiSIEM updates the Incident Count value and Last Seen timestamp.
• B.  FortiSIEM generates a new incident each time the rule triggers, and updates the First Seen and Last Seen timestamps.
• C.  FortiSIEM changes the incident status to Repeated, and updates the Last Seen timestamp.
• D.  FortiSIEM generates a new incident based on the Rule Frequency value, and updates the First Seen and Last Seen timestamps.

Which running mode takes the most time to perform machine learning tasks?

• A.  Local auto
• B.  Local
• C.  Regression
• D.  Forecasting

Refer to the exhibit.

If you group the events by User, Source IP, and Count attributes, how many results will FortiSIEM display?

• A.  Six
• B.  Three
• C.  Five
• D.  Four
• E.  Two