Download
Security_Operations_7.4_Analyst_Exam_Description.pdf
Question :57
Refer to the exhibits.
You configured a spearphishing event handler and the associated rule. However. FortiAnalyzer did not generate an event.
When you check the FortiAnalyzer log viewer, you confirm that FortiSandbox forwarded the appropriate logs, as shown in the raw log exhibit.
What configuration must you change on FortiAnalyzer in order for FortiAnalyzer to generate an event?
A. In the Log Type field, changethe selection toAntiVirus Log(malware).
B. Configure a FortiSandbox data selector and add it to the event handler.
C. In the Log Filter by Text field, type the value:.5 ub t ype ma Iwa re..
D. Change trigger condition by selectin
E. Within a group, the log field Malware Kame (mname> has 2 or more unique values.
Ans:B
[ add comment ] | permalink | print article | related link |
( 2.9 / 87 )
Random Entry