NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

By Fortinet · Question Mode

QuestionQ40

VerifiedML, UEBA, and ZTNA

Which rule logic should be used to apply a user entity and behavior analytics (UEBA) tag to an event involving a failed login by the account JSmith?

Explanation

An exact-match condition on the Username field identifies the specific JSmith account, ensuring the UEBA tag is applied only to its failed-login events.

Community Discussion

No comments yet. Be the first to start the discussion!