最新のNSE5_FSM-5.2問題集で試験を準備する

Fortinet NSE5_FSM-5.2 試験概要:

Fortinet NSE5_FSM-5.2 試験シラバストピック:

Fortinet NSE 5 - FortiSIEM 5.2 認定 NSE5_FSM-5.2 試験問題：

1. Refer to the exhibit.

How was the FortiGate device discovered by FortiSIEM?

A) Through syslog discovery
B) Through GUI log discovery
C) Using the pull events method
D) Through auto log discovery

2. Which database is used for storing anomaly data, that is calculated for different parameters, such as traffic and device resource usage running averages, and standard deviation values?

A) Event DB
B) SVN DB
C) CMDB
D) Profile DB

3. Refer to the exhibit.

Three events are collected over a 10-minutc time period from two servers Server A and Server B.
Based on the settings being used for the rule subpattern. how many incidents will the servers generate?

A) Server A will not generate any incidents and Server B will not generate any incidents
B) Server A will generate one incident and Server B will not generate any incidents
C) Server A will generate one incident and Server B wifl generate one incident
D) Server B will generate one incident and Server A will not generate any incidents

4. Refer to the exhibit.

A FortiSIEM is continuously receiving syslog events from a FortiGate firewall The FortiSlfcM administrator is trying to search the raw event logs for the last two hours that contain the keyword tcp . However, the administrator is getting no results from the search.
Based on the selected filters shown in the exhibit, why are there no search results?

A) The administrator selected - in the Operator column That a the wrong operator.
B) The keyword is case sensitive Instead of typing TCP in the Value field. the administrator should type tcp.
C) The administrator selected AND in the Next drop-down list. This is the wrong boolean operator.
D) In the Time section, the administrator selected the Relative Last option, and in the drop-down lists, selected 2 and Hours as the lime period The time period should be 24 hours.

5. What are the four categories of incidents?

A) Devices, users, high risk, and low risk
B) Performance, availability, security, and change
C) Security, change, high risk, and low risk
D) Performance, devices, high risk, and low risk

質問と回答：