What feature defines when an incident is created by FortiSIEM?
Refer to the exhibit. What is the Group: VPN Gateway value referring to?

What can you use to send data to FortiSIEM for user and entity behavior analytics (UEBA)?
Which two elements can you use to define how an automation policy activates? (Choose two.)
Where must you define and assign a custom python script as a remediation action?
Refer to the exhibit.

What will happen when a device being analyzed by the machine learning configuration shown in the exhibit has a consistently high memory utilization?
Refer to the exhibit. The analyst is troubleshooting the analytics query shown in the exhibit.

Why is this search not producing any results?