Question 1

Refer to the exhibit.How was this incident cleared?

Options :

A : The analyst manually cleared the incident from the incident table.

B : FortiSIEM cleared the incident automatically after 24 hours.

C : The incident was cleared automatically by the rule.

D : The endpoint was rebooted and sent an all-clear signal to FortiSIEM.

Answer: C

Question 2

Which running mode takes the most time to perform machine learning tasks?

Options :

A : Local auto

B : Local

C : Forecasting

D : Regression

Answer: B

Question 3

Refer to the exhibit.Which value would you expect the FortiSIEM parser to use to populate the Application Name field?

Options :

A : applist

B : Network.Service

C : SSL

D : wan1

Answer: C

Higher Test Marks with Free Online FCP_FSM_AN-7.2 Exam Practice