Where can you define automated remediation on FortiSIEM?

• A.Notification policy
• B.Remediation policy
• C.Integration policy
• D.Authentication policy

Comment: *

Name: *

Email: *

Verification: *

If a FortiSIEM rule is constructed to detect a potential data exfiltration attempt, which framework can provide insights on the techniques attackers might use for this purpose?

• A.NIST SP 800-53?
• B.OWASP Top Ten?
• C.MITRE ATT&CK®?
• D.ISO/IEC 27001?

Comment: *

Name: *

Email: *

Verification: *

What is the disadvantage of automatic remediation?

• A.External threats or attacks detected by FortiSIEM will need user interaction to take action on an already overworked SOC team.
• B.Threat behaviors occurring during the night could take hours to respond to.
• C.It can make a disruptive change to a user, block access to an application, or disconnect critical systems from the network.
• D.It is equivalent to running an IPS in monitor-only mode - watches but does not block.

Comment: *

Name: *

Email: *

Verification: *

What are the benefits of configuring UEBA on FortiSIEM?

• A.Automated response to all network events?
• B.Improved detection of insider threats?
• C.Ability to spot unusual behavior patterns of users and entities?
• D.Enhanced encryption algorithms for data at rest?

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An administrator runs an analytic search for all FortiGate SSL VPN logon failures. The results are grouped by source IP, reporting IP, and user. The administrator wants to restrict the results to only those rows where the COUNT >=3.
Which user would meet that condition?

• A.Jan
• B.Tom
• C.Sarah
• D.Admin

Comment: *

Name: *

Email: *

Verification: *