Question 1

How is a subparttern for a rule defined?

Options :

A : Filters Aggregation. Group By definition

B : Filters Group By definitions. Threshold

C : Filters Threshold Time Window definitions

D : Filters Aggregation Time Window definitions

Answer: D

Question 2

Refer to the exhibit.

What do the yellow stars listed in the Monitor column indicate?

Options :

A : A yellow star indicates that a metric was applied during discovery, and data has been collected successfully

B : A yellow star indicates that a metric was applied during discovery, but data collection has not started

C : A yellow star indicates that a metric was applied during discovery, but FortiSIEM is unable to collect data.

D : A yellow star indicates that a metric was not applied during discovery and, therefore, FortiSEIM was unable to collect data.

Answer: A

Question 3

An administrator is using SNMP and WMI credentials to discover a Windows device. How will the WMI method handle this?

Options :

A : WMI method will collect only traffic and IIS logs.

B : WMI method will collect only DNS logs.

C : WMI method will collect only DHCP logs.

D : WMI method will collect security, application, and system events logs.

Answer: A

Question 4

Which three ports can be used to send Syslogs to FortiSIEM? (Choose three.)

Options :

A : UDP9999

B : UDP 162

C : TCP 514

D : UDP 514

E : TCP 1470

Answer: C,D,E

Question 5

What are the minimum memory requirements for the FortiSIEM supervisor virtual appliance, when the proprietary flat file database is used?

Options :

A : 16GB RAM

B : 32GB RAM

C : 64GB RAM

D : 24GB RAM

Answer: B

Higher Test Marks with Free Online NSE5_FSM-6.3 Exam Practice