Online Access Free FCP_FSM_AN-7.2 Exam Questions

Refer to the exhibit.

The exhibit shows the configuration for a machine learning dataset using anomaly detection.
If the report generating the data being analyzed is run every hour, how long must the FortiSIEM device be up before a valid training set can be produced?

• A.10 hours
• B.3 hours
• C.30 hours
• D.24 hours

Refer to the exhibit. The analyst is troubleshooting the analytics query shown in the exhibit.

Why is this search not producing any results?

• A.The inner and outer nested query attribute types do not match.
• B.The Boolean operator is wrong between the attributes.
• C.You cannot reference User and Event Type attributes in the same search.
• D.The Time Range is set incorrectly.

Refer to the exhibit.

Which value would you expect the FortiSIEM parser to use to populate the Application Name field?

• A.applist
• B.SSL
• C.wan1
• D.Network.Service

Which information can FortiSIEM retrieve from FortiClient EMS through an API connection?

• A.Host login credentials
• B.FortiSIEM license
• C.ZTNA tags
• D.Host software versions

Which analytics search can be used to apply a user and entity behavior analytics (UEBA) tag to an event for a failed login by the user JSmith?

• A.Username CONTAIN smit
• B.User = smith
• C.User IS jsmith
• D.Username NOT END WITH jsmith