Online Access Free NSE6_FSM_AN-7.4 Practice Test

An analyst wants to run a remediation playbook when a user fails a VPN login five times from an external machine. Where do they associate the remediation playbook with the triggering rule?

• A.In the associated rule under Action
• B.In an automation policy
• C.In the associated playbook under Remediation
• D.In an incident policy

Which two categories can you map to the MITRE ATT&CK coverage tables on FortiSIEM?
(Choose two.)

• A.CMDB Entries
• B.Procedures
• C.Threats
• D.Incidents
• E.Rules

Which two attributes can you not select together in the Group By and Display Fields? (Choose two.)

• A.Source IP
• B.Destination IP
• C.Raw Event Log
• D.Reporting IP
• E.Event Reporting Time

You need a model that predicts a target field based on other fields in a dataset and then triggers an anomaly if the value does not match the prediction. Which machine learning (ML) algorithm will you use to build this type of model?

• A.Forecasting
• B.Classification
• C.Regression
• D.Anomaly detection

Refer to the exhibit. If the Capture Variable step ingests the source IP address from an incident and the Block Source IP on FGT step blocks that source IP address on the configured firewall, what will happen when this playbook is executed?

• A.Three different source IP addresses, depending on the network configuration of the firewalls, will be blocked.
• B.A single source IP address from the incident will be blocked on the first playbook connector.
• C.A different source IP address, depending on the organization, will be blocked on all three firewalls.
• D.The same source IP address will be blocked on all three firewalls.