Fortinet
FCP_FAZ_AD-7.4 · Question #135
Refer to the exhibit. Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by…
The correct answer is D. operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin. See the full explanation below for the reasoning.
Question
Refer to the exhibit. Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin", and coming from Laptop1. Which filter will achieve the desired result?
Exhibit
Options
- Aoperation-login & dstip==10.1.1.210 & user!-admin
- Boperation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin
- Coperation-login & performed_on=="GUI(10.1.1.210)" & user!=admin
- Doperation-login & performed_on=="GUI(10.1.1.100)" & user!=admin
How the community answered
(39 responses)- A3% (1)
- B8% (3)
- C13% (5)
- D77% (30)
Community Discussion
No community discussion yet for this question.