Identify Various Rule Components NSE6-FORTISIEM-ANALYST Practice Questions (Page 2)

Questions 6–8

1. 6foundation · easy

   When configuring an action component in a FortiSIEM rule, which of the following is a configurable attribute?

   • AThe rule's schedule interval
   • BThe event source IP address
   • CThe type of action, such as creating an incident or sending an email
   • DThe logical operator between conditions
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In FortiSIEM, a rule is composed of several distinct component types. Which of the following correctly lists the three primary component types that make up a FortiSIEM rule?

   • AEvents, incidents, and dashboards
   • BTriggers, variables, and notifications
   • CConditions, filters, and actions
   • DPatterns, groups, and reports
   Reveal Solution Discussion Select an answer first
3. 8foundation · easy

   In FortiSIEM rule evaluation, what is the role of the 'filter' component?

   • AIt schedules when the rule runs
   • BIt specifies the logical combination of conditions
   • CIt defines the response when the rule matches
   • DIt restricts the set of events that are considered for matching
   Reveal Solution Discussion Select an answer first