Fortinet NSE5_FSM-6.3 Quiz 1 Topic 1 Questions 1-5

Question: 1

Refer to the exhibit.

q1_NSE5_FSM-6.3

What does the pauso icon indicate?

AData collection is paused after the intervals shown for metrics.

BData collection has not started.

CData collection execution failed because the device is not reachable.

DData collection is paused duo to an issue, such as a change of password.

Show Answer

Question: 2

Refer to the exhibit.

q2_NSE5_FSM-6.3

The FortiSIEM administrator is examining events for two devices to investigate an issue. However, the administrator is not getting any results from their search.

Based on the selected filters shown in the exhibit, why is the search returning no results?

AParenthesis are missing.

BThe wrong boolean operator is selected in the Next column.

CThe wrong option is selected in the Operator column.

DAn invalid IP subnet is typed in the Value column.

Show Answer

Question: 3

An administrator defines SMTP as a critical process on a Linux server.

It the SMTP process is stopped. FortiSIEM will generate a critical event with which event type?

APostfix-Mail-Stop

BPH_DEV_MON_PROC_STOP

CPH_DEV_MON_SMTP_STOP

DGeneric_SMTP_Procoss_Exit

Show Answer

Question: 4

A customer is experiencing slow performance while executing long, adhoc analytic searches Which FortiSIEM component can make the searches run faster?

ACorrelation worker

BEvent worker

CStorage worker

DQuery worker

Show Answer

Question: 5

Consider the storage of anomaly baseline date that is calculated for different parameters. Which database is used for storing this data?

AEvent DB

BProfile DB

CSVNDB

DCMDB

Show Answer

Fortinet NSE5_FSM-6.3 Quiz:1 Topic:1 Questions:1-5