NSE 6
FortiSIEM Analyst
Part of NSE 6: Security Operations
Time allowed: 70 minutes. Language: English. Product version: FortiSIEM 7.4.
Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by fortinet. Objectives are transcribed and mapped by hand, so this page may contain mistakes or may have fallen behind the vendor's current material: exam objectives, versions, numbering and availability all change without notice. Treat fortinet's own certification portal as the source of truth and verify against it before you book anything.
Analytics
1.01 Build queries from search results and events
1.02 Apply group by and data aggregation on search results
1.03 Perform configuration management database (CMDB) and lookup table queries
1.04 Perform nested query lookups
FortiEDR security settings and policies
2.01 Configure communication control policy
On this site: FortiEDR Policies, Communication Control, and Playbooks2.02 Configure security policies
2.03 Configure playbooks
On this site: FortiEDR Policies, Communication Control, and Playbooks2.04 Explain Fortinet Cloud Service (FCS)
Rules and subpatterns
3.01 Identify various rule components
3.02 Utilize rule subpatterns, aggregation, and group by
3.03 Configure FortiSIEM analytics rules
Incidents, notifications, and remediation
4.01 Manage and tune incidents
4.02 Configure notification policies
4.03 Configure remediation options
ML, UEBA, and ZTNA
5.01 Configure machine learning (ML) configuration tasks
5.02 Integrate user and entity behavior analytics (UEBA) data into rules and dashboards
5.03 Describe how to integrate zero trust network access (ZTNA) into FortiSIEM operations
Public sources, used in good faith
These guides are independent study aids built from publicly available material: published exam blueprints, official product documentation, and vendor training catalogues. Product names, exam codes, and trademarks belong to their owners and are used only to identify the subject being taught. This site is not affiliated with or endorsed by any vendor named here. If you hold rights in material published on this page and believe it should be removed or corrected, please send the exact URL and a short note on the issue through the contact page; requests are reviewed promptly and in good faith. Read the full disclaimer →