Question 1
Refer to the exhibit. Which value will the FortiSIEM parser use to populate the Application Name field?
Question 2
When using user and entity behavior analytics (UEBA) on FortiSIEM, what must you use to dynamically supply a list of IP addresses to a FortiGate device for blocking purposes?
Question 3
You want to reference the first source IP address from an incident in a playbook. Which option shows the correct Jinja syntax for using a variable for the source IP address in a FortiSIEM playbook?
Question 4
What can you use to send data to FortiSIEM for user and entity behavior analytics (UEBA)?
Question 5
Refer to the exhibit.
Which value would you expect the FortiSIEM parser to use to populate the Application Name field?