Online Access Free NSE5_FSM-6.3 Exam Questions

Which FortiSIEM components are capable of performing device discovery?

• A.FortiSIEM Linux agent
• B.Collector
• C.FortiSIEM Windows agent
• D.Worker

Which statement best describes auto-log discovery?

• A.When a syslog-relay is used to deliver logs to the FortiSIEM report server
• B.When syslog is sent from a network device to FortiSIEM without performing a discovery
• C.When SNMP Is used for a range scan discovery
• D.When FortiSIEM pulls syslog from a network device to determine event types

In FortiSIEM enterprise licensing mode, it the link between the collector and data center FortiSlEM cluster is down, what happens?

• A.The collector processes stop, and events ate dropped.
• B.The collector drops incoming events like syslog. but stops performance collection.
• C.The collector continues performance collection of devices, but slops receiving syslog.
• D.The collector buffers events

In me FortiSIEM CLI. which command must you use to determine whether or not syslog is being received from a network device?

• A.Onetcat
• B.OphSyslogRecorder
• C.phDeviceTest
• D.tcpdump

If an incident's status is Cleared, what does this mean?

• A.A security rule issue has been resolved.
• B.Two hours have passed since the incident occurred and the incident has not reoccurred.
• C.The incident was cleared by an operator.
• D.A clear condition set on a rule was satisfied.