Verified Fortinet FCP_FSM_AN-7.2 Exam Dumps for Last-Minute Exam Prep

Question No: 1

MultipleChoice

Refer to the exhibit.

According to the automation policy configuration shown in the exhibit, what happens if an associated rule triggers?

Options

AFortiSIEM runs the remediation script, because that takes precedence over all other options.

BFortiSIEM performs all selected actions.

CFortiSIEM fails to the integration policy, because no policy is defined.

DFortiSIEM sends an email, because that is first on the list.

Question No: 2

MultipleChoice

Refer to the exhibit.

The configuration shown in the exhibit is incorrect.

What must you change to allow this configuration to be successfully applied to FortiSIEM?

Options

AThe Train factor must be 70% or greater.

BRun Mode must be set to ML.

COnly one AVG type field must be selected under Fields to use for Prediction.

DThe selection in Fields to use for Prediction and Field to Predict must match.

Question No: 3

MultipleChoice

How does FortiSIEM update the incident table if a performance rule triggers repeatedly?

Options

AFortiSIEM changes the incident status to Repeated, and updates the Last Seen timestamp.

BFortiSIEM updates the Incident Count value and Last Seen timestamp.

CFortiSIEM generates a new incident based on the Rule Frequency value, and updates the First Seen and Last Seen timestamps.

DFortiSIEM generates a new incident each time the rule triggers, and updates the First Seen and Last Seen timestamps.

Question No: 4

MultipleChoice

Refer to the exhibit.

If you group the events by User and Count attributes, how many results will FortiSIEM display?

Options

ATwo

BSix

CThree

DFive

EOne

Question No: 5

MultipleChoice

Refer to the exhibit.

If a rule containing the automation policy shown in the exhibit triggers, what will happen?

Options

AAssociated source IP addresses will be blocked on devices in the Aviation organization.

BAssociated source IP addresses will be blocked on all FortiGate firewalls.

CAssociated source IP addresses will be blocked on devices in the Network CMDB group.

DAssociated source IP addresses will be blocked on two FortiGate firewalls.

Question No: 6

MultipleChoice

Refer to the exhibit.

A FortiSIEM device is receiving syslog events from a FortiGate firewall. The FortiSIEM analyst is trying to search the raw event logs for the last two hours that contain the keyword "udp". However, they are getting no results from the search, which they know should be available. Based on the filter shown in the exhibit, why are there no search results?

Options

AThe analyst selected AND in the Next column. This is the wrong Boolean operator.

BThe Time Range value should be set to Real-Time.

CThe keyword is case sensitive. Instead of typing udp in the Value field, the analyst should type UDP.

DThe analyst selected = in the Operator column. That is the wrong operator.

Question No: 7

MultipleChoice

Refer to the exhibit.

Which two lookup types can you reference as the subquery in a nested analytics query? (Choose two.)

Options

ALDAP Query

BCMDB Query

CSNMP Query

DEvent Query

Free Fortinet FCP_FSM_AN-7.2 Exam Dumps August 2026