NSE5_FSM-6.3 · Question #24
Refer to the exhibit. Which section contains the sortings that determine how many incidents are created?
The correct answer is B. Group By. Incident Creation in FortiSIEM: Incidents in FortiSIEM are created based on specific patterns and conditions defined within the system. Group By Function: The "Group By" section in the "Edit SubPattern" window specifies how the data should be grouped for analysis and incident…
Question
Refer to the exhibit. Which section contains the sortings that determine how many incidents are created?
Exhibits
Options
- AActions
- BGroup By
- CAggregate
- DFilters
How the community answered
(39 responses)- A3% (1)
- B74% (29)
- C8% (3)
- D15% (6)
Explanation
Incident Creation in FortiSIEM: Incidents in FortiSIEM are created based on specific patterns and conditions defined within the system. Group By Function: The "Group By" section in the "Edit SubPattern" window specifies how the data should be grouped for analysis and incident creation. Impact of Grouping: The way data is grouped affects the number of incidents generated. Each unique combination of the grouped attributes results in a separate incident. Exhibit Analysis: In the provided exhibit, the "Group By" section lists "Reporting Device," "Reporting IP," and "User." This means incidents will be created for each unique combination of these attributes.
Topics
Community Discussion
No community discussion yet for this question.