Online Access Free NSE5_FSM-5.2 Exam Questions

What protocol can be used to collect Windows event logs in an agentless method?

• A.SSH
• B.WMI
• C.SNMP
• D.SMTP

What are the four possible incident status values?

• A.Active, dosed, cleared, open
• B.Active, cleared, cleared manually, system cleared
• C.Active, closed, manual, resolved
• D.Active, auto cleared, manual, false positive

A FortiSIEM supervisor at headquarters is struggling to keep up with an increase of EPS (Events Per Second) being reported across the enterprise. What components should an administrator consider deploying to assist the supervisor with processing data?

• A.Supervisor
• B.Worker
• C.Collector
• D.Agent

Which FortiSIEM components are capable of performing device discovery?

• A.Worker
• B.FortiSIEM Linux agent
• C.Collector
• D.FortiSIEM Windows agent

Refer to the exhibit.

If events are grouped by Event Receive Time, Reporting IP, and User attributes in FortiSIEM, how many results will be displayed?

• A.Eight results will be displayed
• B.Two results will be displayed
• C.Four results will be displayed
• D.Unique attributes cannot be grouped