NSE5_FSM-6.3 · Question #11
In the advanced analytical rules engine in FortiSIEM, multiple subpatterms can be referenced using which three operation?(Choose three.)
The correct answer is C. FOLLOWED_BY D. OR E. AND. Advanced Analytical Rules Engine: FortiSIEM's rules engine allows for complex event correlation using multiple subpatterns. Operations for Referencing Subpatterns: FOLLOWED_BY: This operation is used to indicate that one event follows another within a specified time window. OR…
Question
In the advanced analytical rules engine in FortiSIEM, multiple subpatterms can be referenced using which three operation?(Choose three.)
Options
- AELSE
- BNOT
- CFOLLOWED_BY
- DOR
- EAND
How the community answered
(40 responses)- A13% (5)
- B8% (3)
- C80% (32)
Explanation
Advanced Analytical Rules Engine: FortiSIEM's rules engine allows for complex event correlation using multiple subpatterns. Operations for Referencing Subpatterns: FOLLOWED_BY: This operation is used to indicate that one event follows another within a specified time window. OR: This logical operation allows for the inclusion of multiple subpatterns, where the rule triggers if any of the subpatterns match. AND: This logical operation requires all referenced subpatterns to match for the rule to trigger. Usage: These operations allow for detailed and precise event correlation, helping to detect complex patterns and incidents.
Topics
Community Discussion
No community discussion yet for this question.