NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

Question

You want to create an event query that shows only events sent to higher-numbered destination ports (1024–65535).

Which analytic search string is valid for this scenario?

Explanation

FortiSIEM analytic searches express an inclusive numeric range with BETWEEN followed by a hyphenated lower-to-upper range. BETWEEN 1024-65535 therefore matches destination TCP/UDP ports from 1024 through 65535.

NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

AstroTutor

Notes

Readiness

QuestionQ19

Community Discussion