Free Fortinet NSE6_FSM_AN-7.4 Exam Dumps Questions & Answers

Refer to the exhibit. If a user account is locked after five failed login attempts, how many times will this rule be triggered if three individual users all fail their login 10 times?

• A.  Three
• B.  Fifteen
• C.  One
• D.  Five

You want to build an event query that displays only events to higher number destination ports (1024-65535). Which analytic search string is valid for this scenario?

• A.  Destination TCP/UDP Port BETWEEN 1024-65535
• B.  Destination TCP/UDP Port >= 1024 AND Destination TCP/UDP Port <= 65535
• C.  Destination TCP/UDP Port > 1024
• D.  Destination TCP/UDP Port = 1024-65535

Refer to the exhibit. Which two lookup types can you reference as the subquery in a nested analytics query? (Choose two.)

• A.  LDAP query
• B.  API query
• C.  Event query
• D.  CMDB query

What is one difference between a lookup table and a watchlist?

• A.  Watch list entries do not expire, lookup table entries have a defined lifetime.
• B.  A lookup table can have multiple columns, and a watchlist only has one.
• C.  A lookup table requires a parser to be able to query and interpret the data, a watchlist does not require a parser.
• D.  A watchlist can be updated through an API, and a lookup table cannot.

Which two types of information can FortiSIEM retrieve from FortiClient EMS through an external connection? (Choose two.)

• A.  Vulnerability scan events
• B.  Devices with FortiSIEM agents
• C.  Zero trust network access (ZTNA) tags
• D.  Device login credentials