NSE6_FSM_AN-7.4 Practice Questions

A.  

Parentheses are missing between the two items.

B.  

The wrong Boolean operator is selected in the Next column.

C.  

The wrong option is selected in the Operator column.

D.  

An invalid IP address is typed in the Value column.

A.  

The Time Range is set incorrectly.

B.  

The inner and outer nested query attribute types do not match.

C.  

You cannot reference User and Event Type attributes in the same search.

D.  

The Boolean operator is wrong between the attributes.

A.  

Click Value > Select from CMD

B.  

B.  

On the CMDB tab, select an entry, and then click Create Search.

C.  

On the Admin tab, click CMDB Search.

D.  

Click Attribute > Select from CMD

B.  

A.  

Associated source IP addresses will be blocked on devices in the Aviation organization.

B.  

Associated source IP addresses will be blocked on all FortiGate firewalls.

C.  

Associated source IP addresses will be blocked on devices in the Network CMDB group.

D.  

Associated source IP addresses will be blocked on two FortiGate firewalls.

A.  

Two

B.  

Six

C.  

Three

D.  

Five

E.  

Four

A.  

Aggregate

B.  

Group By

C.  

Actions

D.  

Filters

A.  

FortiSIEM will list source IP addresses found in the last 10 minutes of events from each day in the Approved Devices report from the last 30 days.

B.  

FortiSIEM will search in real time using 10-minute blocks for a source IP address that is not in the Approved Devices report from the last 30 days.

C.  

FortiSIEM will search the last 30 days of events for a source IP address that is not in the Approved Devices report.

D.  

FortiSIEM will search the last 10 minutes of events for a source IP address that is not in the Approved Devices report from the last 30 days.

A.  

FortiSIEM runs the remediation script, because that takes precedence over all other options.

B.  

FortiSIEM performs all selected actions.

C.  

FortiSIEM fails to the integration policy, because no policy is defined.

D.  

FortiSIEM sends an email, because that is first on the list.

A.  

Server A will generate one incident and Server B will generate one incident.

B.  

Server A will not generate any incidents and server B will generate one incident.

C.  

Server A will not generate any incidents and Server B will not generate any incidents.

D.  

Server A will generate one incident and Server B will not generate any incidents.

A.  

The Event Type refers to a CMDB lookup and should be an Event lookup.

B.  

The Destination Host Name value is not fully qualified.

C.  

The Group By attributes restricts which events are counted.

D.  

The Aggregate attribute is too restrictive.