Refer to the exhibit. An analyst is trying to generate an incident with a title that includes the Source IP, Destination IP, User, and Destination Host Name. They are unable to add a Destination Host Name as an incident attribute. What must be changed to allow the analyst to select Destination Host Name as an attribute? (Choose one answer)

A. The Destination Host Name must be set as an aggregate item in a subpattern.
B. The Destination Host Name must be added as an Event type in the FortiSIEM.
C. The Destination Host Name must be selected as a Triggered Attribute.
D. The Destination IP Event Attribute must be removed.

Correct Answer: B

Brave-Dump Clients Votes

B 50%

A 50%

Comments

Zaid Haitham 2025-09-12 20:56:16

Selected Answers: B

I think it is B

Brave-Dumps Admin 2025-09-14 12:38:04
Thank you, Zaid, for being a part of brave-dumps community, please explain why B?
Zaid Haitham 2025-09-15 23:59:50
i have tested in fortisiem. Triggered attribute has no effect on that

Anonymous User 2026-02-08 02:55:55

Selected Answers: A

In FortiSIEM’s Incident Generator when creating an incident rule and defining the Incident Title, only the attributes that are part of the subpattern , and defined as aggregate items can be used in the incident title or inserted as incident attributes.

https://help.fortinet.com/fsiem/6-1-2/Online-Help/HTML5_Help/Creating-rules.html