An analyst is reviewing an HTTP event and needs to determine if a user downloaded a malicious file from a specific URL. Which combination of HTTP event fields would provide the most direct evidence of this activity?

http_method, http_uri, http_status

http_uri, http_content_type, http_status

http_host, http_uri, http_user_agent

http_uri, http_referrer, http_status

FortinetNSE 6 - FortiNDR Cloud Analyst

Domain 2Objective 1

Explain Event Types and Fields NSE6-FORTINDR-CLOUD-ANALYST Practice Questions (Page 7)

Part of the Events and Queries domain, which accounts for 25-35% of the NSE6-FORTINDR-CLOUD-ANALYST exam.

31questions here

7free pages

9concepts

25-35%of the exam

Questions 31–31

31application · medium
An analyst is reviewing an HTTP event and needs to determine if a user downloaded a malicious file from a specific URL. Which combination of HTTP event fields would provide the most direct evidence of this activity?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NSE6-FORTINDR-CLOUD-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTINDR-CLOUD-ANALYST” is a trademark of its owner, used for identification only.

Explain Event Types and Fields NSE6-FORTINDR-CLOUD-ANALYST Practice Questions (Page 7)

Questions 31–31

An analyst is reviewing an HTTP event and needs to determine if a user downloaded a malicious file from a specific URL. Which combination of HTTP event fields would provide the most direct evidence of this activity?

Keep studying — Events and Queries