最新的 NSE 6 Network Security Specialist NSE6_FSM_AN-7.4 免費考試真題:

1. Refer to the exhibit. Why would the two entries shown in the exhibit be included in an incident action history?

A) The system cleared the incident and is configured to Send Email/SMS/Webhook to the target users.
B) An administrator has enabled the Notify on Incident Cleared option.
C) An analyst resolved and cleared the incident and the Do not notify when an incident is cleared by system option is not enabled in the automation policy.
D) Multiple new incidents have occurred and have triggered the rule threshold.

2. Refer to the exhibits.



Three events are collected over 10 minutes from two servers: Server A and Server B.
Based on the settings for the rule subpattern and a 10-minute condition window, how many incidents will the servers generate?

A) Server A will generate three incidents and server B will generate one incident.
B) Server A will not generate any incidents and Server B will not generate any incidents.
C) Server A will generate one incident and Server B will not generate any incidents
D) Server A will generate one incident and Server B will generate one incident.

3. Which two processes run analytical queries and must always be running to perform searches?
(Choose two.)

A) phQueryWorker
B) phQueryMaster
C) phRuleWorker
D) phAnomalyMaster
E) phRuleMaster

4. Which two attributes can you not select together in the Group By and Display Fields? (Choose two.)

A) Destination IP
B) Source IP
C) Raw Event Log
D) Event Reporting Time
E) Reporting IP

5. How does FortiSIEM update the incident details if the same rule triggers repeatedly?

A) FortiSIEM updates the Incident Count value and Last Seen timestamp.
B) FortiSIEM changes the incident status to Repeated, and updates the Last Seen timestamp.
C) FortiSIEM generates a new incident based on the Rule Frequency value, and updates the First Seen and Last Seen timestamps.
D) FortiSIEM generates a new incident each time the rule triggers and updates all the First Seen and Last Seen timestamps.

問題與答案：