Download Fortinet.NSE5_FSM-5.2.VCEplus.2022-08-01.42q.tqb
| Vendor: | Fortinet |
| Exam Code: | NSE5_FSM-5.2 |
| Exam Name: | NSE 5 - FortiSIEM 5.2 |
| Date: | Aug 01, 2022 |
| File Size: | 4 MB |
Demo Questions
Question 1
Refer to the exhibit.
A FortiSlEM administrator wants to group some attributes for a report, but is not able to do so successfully.
As shown in the exhibit, why are some of the fields highlighted in red?
- The Event Receive Time attribute is not available for logs.
- The attribute COUNT(Matched event) is an invalid expression.
- Unique attributes cannot be grouped.
- No RAW Event Log attribute is available for devices.
Correct answer: C
Question 2
In the rules engine, which condition instructs FortiSIEM to summarize and count the matching evaluated data?
- Time Window
- Aggregation
- Group By
- Filters
Correct answer: B
Explanation:
Question 3
Refer to the exhibit.
How was the FortiGate device discovered by FortiSIEM?
- Through GUI log discovery
- Through syslog discovery
- Using the pull events method
- Through auto log discovery
Correct answer: A
Explanation:
