Spring Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

  1. Home
  2. Fortinet
  3. Fortinet Certified Professional Security Operations
  4. FCP_FSM_AN-7.2
  5. FCP - FortiSIEM 7.2 Analyst Questions and Answers

FCP_FSM_AN-7.2 FCP - FortiSIEM 7.2 Analyst Questions and Answers

Questions 4

Which information can FortiSIEM retrieve from FortiClient EMS through an API connection?

Options:

A.

Host software versions

B.

FortiSIEM license

C.

Host login credentials

D.

ZTNA tags

Buy Now
Questions 5

Refer to the exhibit.

FCP_FSM_AN-7.2 Question 5

Which two conditions will match this rule and subpatterns? (Choose two.)

Options:

A.

A user using RDP over SSL VPN fails to log in to an application five times.

B.

A user runs a brute force password cracker against an RDP server.

C.

A user fails twice to log in when connecting through RDP.

D.

A user connects to the wrong IP address for an RDP session five times.

Buy Now
Questions 6

Refer to the exhibit.

FCP_FSM_AN-7.2 Question 6

The configuration shown in the exhibit is incorrect.

What must you change to allow this configuration to be successfully applied to FortiSIEM?

Options:

A.

The Train factor must be 70% or greater.

B.

Run Mode must be set to ML.

C.

Only one AVG type field must be selected under Fields to use for Prediction.

D.

The selection in Fields to use for Prediction and Field to Predict must match.

Buy Now
Questions 7

Refer to the exhibit.

FCP_FSM_AN-7.2 Question 7

Which two lookup types can you reference as the subquery in a nested analytics query? (Choose two.)

Options:

A.

LDAP Query

B.

CMDB Query

C.

SNMP Query

D.

Event Query

Buy Now
Questions 8

Which items are used to define a subpattern?

Options:

A.

Filters, Aggregate, Group By definitions

B.

Filters, Aggregate, Time Window definitions

C.

Filters, Group By, Threshold definitions

D.

Filters, Threshold, Time Window definitions

Buy Now
Questions 9

Refer to the exhibit.

FCP_FSM_AN-7.2 Question 9

If a rule containing the automation policy shown in the exhibit triggers, what will happen?

Options:

A.

Associated source IP addresses will be blocked on devices in the Aviation organization.

B.

Associated source IP addresses will be blocked on all FortiGate firewalls.

C.

Associated source IP addresses will be blocked on devices in the Network CMDB group.

D.

Associated source IP addresses will be blocked on two FortiGate firewalls.

Buy Now
Exam Code: FCP_FSM_AN-7.2
Exam Name: FCP - FortiSIEM 7.2 Analyst
Last Update: May 31, 2026
Questions: 32

PDF + Testing Engine

$64.99   $185.69
buy now FCP_FSM_AN-7.2 pdf + testing engine

Testing Engine

$49.99   $142.83
buy now FCP_FSM_AN-7.2 testing engine

PDF (Q&A)

$54.99   $157.11
buy now FCP_FSM_AN-7.2 pdf