FCP-FSM-AN-7-2: Fortinet NSE 6 - FortiSIEM 7.2 AnalystDemo

Question

Which two components are required for a rule?

Choose two

A Exception policy
B Subpattern
C Detection Technology
D Clear policy

Explanation

A FortiSIEM rule specifies its detection method through Detection Technology and requires a Subpattern to define the event characteristics and thresholds that trigger an incident. Exception and clear conditions are optional configurations.

Learn more

FortiSIEM 7.5.1 User Guide — Creating Rules

FCP-FSM-AN-7-2: Fortinet NSE 6 - FortiSIEM 7.2 AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ19

Community Discussion