Which two data areas can you use for user and entity behavior analytics (EBA) machine learning models?
(Choose two.)

• A.Process
• B.Location
• C.Resources
• D.Network

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

What will happen when a device being analyzed by the machine learning configuration shown in the exhibit has consistently high memory utilization?

• A.FortiSIEM will update the regression tables for memory utilization, and average sent and received bytes.
• B.FortiSIEM will trigger an incident for high memory utilization.
• C.FortiSIEM will lower the CPU utilization trigger requirement for CPU utilization.
• D.FortiSIEM will update the model with a higher memory utilization average value.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. What is the Group: VPN Gateway value referring to?

• A.A watchlist
• B.An authentication user group
• C.A CMDB device group
• D.A FortiGate address group

Comment: *

Name: *

Email: *

Verification: *

Which analytics search can be used to apply a user and entity behavior analytics (UEBA) tag to an event for a failed login by the user JSmith?

• A.User = smith
• B.Username NOT END WITH jsmith
• C.User IS jsmith
• D.Username CONTAIN smit

Comment: *

Name: *

Email: *

Verification: *

What can you use to send data to FortiSIEM for user and entity behavior analytics (UEBA)?

• A.FortiSIEM agent
• B.SSH
• C.SNMP
• D.FortiSIEM worker

Comment: *

Name: *

Email: *

Verification: *