FCP_FSM_AN-7.2 Exam Question 1
Which information can FortiSIEM retrieve from FortiClient EMS through an API connection?
FCP_FSM_AN-7.2 Exam Question 2
Refer to the exhibit.
How was this incident cleared?
How was this incident cleared?
FCP_FSM_AN-7.2 Exam Question 3
Refer to the exhibit.
A FortiSIEM device is receiving syslog events from a FortiGate firewall. The FortiSIEM analyst is trying to search the raw event logs for the last two hours that contain the keyword "udp". However, they are getting no results from the search, which they know should be available. Based on the filter shown in the exhibit, why are there no search results?
A FortiSIEM device is receiving syslog events from a FortiGate firewall. The FortiSIEM analyst is trying to search the raw event logs for the last two hours that contain the keyword "udp". However, they are getting no results from the search, which they know should be available. Based on the filter shown in the exhibit, why are there no search results?
FCP_FSM_AN-7.2 Exam Question 4
What can you use to send data to FortiSIEM for user and entity behavior analytics (UEBA)?
FCP_FSM_AN-7.2 Exam Question 5
What are two required components of a rule? (Choose two.)