View all questions & answers for the NSE 7 - Security Operations 7.6 Architect Materials exam

NSE 7 - Security Operations 7.6 Architect Materials - Question #23 Discussion

Comment Image Comment Image Comment Image

You are using FortiSIEM analytics to reference the configuration management database (CMDB) event type categories with the following requirements: 1- Attribute: Event Type 2- Value: Group: Logon Success Which operator must you use for the analytics search? (Choose one answer)

  • A. CONTAIN
  • B. IN
  • C. HAS
  • D. IS
Correct Answer: B

Brave-Dump Community Votes

Answer: B (2 votes) 66.67%
Answer: D (1 vote) 33.33%

Community Explanations & Comments (3)

Anonymous User 8 months ago
Selected: D
IN searches a list or set of values, this is matching a single event type so it's D
George Were 8 months ago
IS only has one value, NULL
Anonymous User 7 months ago
Selected: B
In
Anonymous User 6 months ago
Selected: B
IN is used when matching with a member out of a group.