Question 1

How is a subparttern for a rule defined?

Options :

A : Filters Aggregation. Group By definition

B : Filters Group By definitions. Threshold

C : Filters Threshold Time Window definitions

D : Filters Aggregation Time Window definitions

Answer: D

Question 2

What are the minimum memory requirements for the FortiSIEM supervisor virtual appliance, when the proprietary flat file database is used?

Options :

A : 16GB RAM

B : 32GB RAM

C : 64GB RAM

D : 24GB RAM

Answer: B

Question 3

FortiSIEM is deployed in disaster recovery mode. When disaster strikes, which two tasks must you perform manually to achieve a successful disaster recovery operation? (Choose two.)

Options :

A : Promote the secondary workers to the primary rotes using the phSecworker2priworker command.

B : Promote the secondary supervisor to the primary role using the phSecondary2primary command.

C :

Change the DNS configuration to ensure that users, devices, and collectors log in to the secondary FortiSIEM.

D : Change the configuration for shared storage NFS configured for EventDB to the secondary FortiSIEM.

Answer: A,C

Question 4

Refer to the exhibit.

A FortiSIEM administrator wants to group some attributes for a report, but is not able to do so successfully.

As shown in the exhibit, why are some of the fields highlighted in red?

Options :

A : The Event Receive Time attribute is not available for logs.

B : The attribute COUNT(Matched event) is an invalid expression.

C : Unique attributes cannot be grouped.

D : No RAW Event Log attribute is available for devices.

Answer: C

Question 5

Refer to the exhibit.

What do the yellow stars listed in the Monitor column indicate?

Options :

A : A yellow star indicates that a metric was applied during discovery, and data has been collected successfully

B : A yellow star indicates that a metric was applied during discovery, but data collection has not started

C : A yellow star indicates that a metric was applied during discovery, but FortiSIEM is unable to collect data.

D : A yellow star indicates that a metric was not applied during discovery and, therefore, FortiSEIM was unable to collect data.

Answer: A

Higher Test Marks with Free Online NSE5_FSM-6.3 Exam Practice

Buying Options: