Fortinet
NSE7_OTS-7.2 · Question #39
NSE7_OTS-7.2 Question #39: Real Exam Question with Answer & Explanation
Sign in or unlock NSE7_OTS-7.2 to reveal the answer and full explanation for question #39. The question stem and answer options stay visible for context.
Question
Refer to the exhibit. An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM. Which statement correctly describes the issue on the rule configuration?
Exhibit
Options
- AThe first condition on the SubPattern filter must use the OR logical operator.
- BThe attributes in the Group By section must match the ones in Fitters section.
- CThe Aggregate attribute COUNT expression is incompatible with the filters.
- DThe SubPattern is missing the filter to match the Modbus protocol.
Unlock NSE7_OTS-7.2 to see the answer
You've previewed enough free NSE7_OTS-7.2 questions. Unlock NSE7_OTS-7.2 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.