Refer to the exhibit.

What is the Group: VPN Gateway value a reference to?

• A.A FortiGate address group
• B.A FortiSIEM rule folder
• C.A configuration management database (CMDB) device group
• D.A FortiSIEM watchlist

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which statement about the nested query shown in the exhibit is true?

• A.The outer query could have also referenced the Protocol field from the inner query.
• B.The outer query should have used the operator CONTAINS when referencing the inner query.
• C.The outer query could have also referenced the Reporting IP address field from the inner query.
• D.The outer query could have referenced all the queried fields from the inner query.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.

You are troubleshooting why the rule shown in the exhibit is generating incidents for successful Remote Desktop Protocol (RDP) connections with correct logins. It should only be triggering when a person fails to log in three or more times to the target device when connecting with RDP.
What is causing the rule to be triggered by correct login events? (Choose one answer)

• A.The subpattern relationship RDP_Connection:User = Failed_Logon:User never matches.
• B.The Boolean between the subpatterns is incorrect.
• C.The attribute types in the subpatterns do not match.
• D.The RDP login is different from the login used to access the target device.

Comment: *

Name: *

Email: *

Verification: *

When configuring machine learning (ML), in which step can you modify how the model fits the training data set?

• A.Prepare Data
• B.Train
• C.Statistics
• D.Design

Comment: *

Name: *

Email: *

Verification: *

Which three types of data can you use to train FortiSIEM machine learning (ML)? (Choose three.)

• A.CSV files
• B.FortiSIEM analytical reports
• C.FortiSIEM ML job
• D.SQL database
• E.Configuration management database (CMDB)

Comment: *

Name: *

Email: *

Verification: *