[2026] Fortinet NSE 6 - FortiSIEM 7.4 Analyst - NSE6_FSM

문제1

Which information can FortiSIEM retrieve from FortiClient EMS through an API connection?

A. Host software versions

B. FortiSIEM license

C. ZTNA tags

D. Host login credentials

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제2

Refer to the exhibit.

An analyst wants the rule shown in the exhibit to trigger when three failed login attempts occur within three minutes.
What should the values be for the condition time window and aggregate count?

A. Time window 180 seconds, aggregate count 3

B. Time window 90 seconds, aggregate count 3

C. Time window 180 seconds, aggregate count 2

D. Time window 90 seconds, aggregate count 2

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제3

Refer to the exhibit. Which two actions can you select in an automation policy to trigger an API call to block an IP address on a FortiGate? (Choose two.)

A. Invoke an Integration Policy

B. Run Playbook on Incident Trigger

C. Send Email/SMS/Webhook to the target users

D. Open Remedy ticket using the configuration set in

E. Run Remediation/Script

정답: A,E

설명: (Fast2test 회원만 볼 수 있음)

문제4

In an automation policy, which two methods can you use for notifications when an incident is triggered? (Choose two.)

A. SNMP trap

B. Email

C. GUI pop-up window

D. Assigned FortiSIEM case

정답: A,B

설명: (Fast2test 회원만 볼 수 있음)

문제5

How does FortiSIEM update the incident details if the same rule triggers repeatedly?

A. FortiSIEM changes the incident status to Repeated, and updates the Last Seen timestamp.

B. FortiSIEM generates a new incident each time the rule triggers and updates all the First Seen and Last Seen timestamps.

C. FortiSIEM updates the Incident Count value and Last Seen timestamp.

D. FortiSIEM generates a new incident based on the Rule Frequency value, and updates the First Seen and Last Seen timestamps.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제6

Which two types of information can FortiSIEM retrieve from FortiClient EMS through an external connection? (Choose two.)

A. Vulnerability scan events

B. Devices with FortiSIEM agents

C. Zero trust network access (ZTNA) tags

D. Device login credentials

정답: A,C

설명: (Fast2test 회원만 볼 수 있음)

문제7

What are the four incident status values on FortiSIEM?

A. Active, closed, cleared, resolved

B. Active, cleared, cleared manually, false positive

C. Active, auto closed, cleared manually, resolved

D. Active, auto cleared, cleared manually, system cleared

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제8

You are creating a rule to fill a gap in your organization's MITRE ATT&CK rule coverage matrix.
How can you associate the rule with an appropriate tactics, techniques and procedures (TTP) category?

A. Assign the TTP category to one of the incidents generated by the rule.

B. Configure the appropriate TTP category in the Define Action section of the rule.

C. Assign the TTP category in the aggregate section of the rule subpattern.

D. Add the rule directly in the Rule Coverage matrix under the appropriate TTP section.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제9

Refer to the exhibit.

Which value would you expect the FortiSIEM parser to use to populate the Application Name field?

A. Network.Service

B. applist

C. SSL

D. wan1

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제10

Refer to the exhibit. What is this rule attempting to match?

A. Failed VPN logon attempts from three or more different outside countries.

B. Excessive VPN logon failures from a source inside the home country.

C. Failed VPN logon events from a source outside the home country.

D. Failed VPN logon attempts from three or more different sources inside the home country.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

Fortinet NSE 6 - FortiSIEM 7.4 Analyst - NSE6_FSM_AN-7.4무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트