Online Access Free FCP_FSM_AN-7.2 Exam Questions

What are the four incident status values on FortiSIEM?

• A.Active, auto cleared, cleared manually, system cleared
• B.Active, auto closed, cleared manually, resolved
• C.Active, closed, cleared, resolved
• D.Active, cleared, cleared manually, false positive

Refer to the exhibit.

An analyst is trying to identify an issue using an expression based on the Expression Builder settings shown in the exhibit; however, the error message shown in the exhibit indicates that the expression is invalid.
What is the correct syntax to create an expression that generates a total count of matched events?

• A.(COUNT) Matched Events
• B.COUNT(Matched Events)
• C.Matched Events COUNT()
• D.Matched Events (COUNT)

Refer to the exhibit. Which value would be saved as the Event Type attribute by the default FortiSIEM parser?

• A.sysUpTime
• B.diskUtil
• C.PH_DEV_MON_SYS_UPTIME
• D.PHL_INFO

You need a model for predicting a target field based on other fields in a dataset and then trigger an anomaly if the value does not match the prediction. Which machine learning algorithm will build this type of model?

• A.Regression
• B.Regression
• C.Clustering
• D.Forecasting

Refer to the exhibit. The analyst is troubleshooting the analytics query shown in the exhibit.

Why is this search not producing any results?

• A.You cannot reference User and Event Type attributes in the same search.
• B.The inner and outer nested query attribute types do not match.
• C.The Boolean operator is wrong between the attributes.
• D.The Time Range is set incorrectly.