View all questions & answers for the NSE 6 - FortiSIEM 7.4 Analyst Exam Materials exam

NSE 6 - FortiSIEM 7.4 Analyst Exam Materials - Question #69 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. What is this rule attempting to match? (Choose one answer)

  • A. Failed VPN logon attempts from three or more different outside countries.
  • B. Failed VPN logon events from a source outside the home country.
  • C. Failed VPN logon attempts from three or more different sources inside the home country.
  • D. Excessive VPN logon failures from a source inside the home country.
Correct Answer: A

Brave-Dump Community Votes

Answer: B (2 votes) 100%

Community Explanations & Comments (2)

Anonymous User 4 months ago
Selected: B
B is the right answer
Anonymous User 4 months ago
Selected: B
Group by is applied to source IP not Source country . so Option A is incorrect