Question 1

What are the four categories of incidents?

Options :

A : Devices, users, high risk, and low risk

B : Performance, availability, security, and change

C : Performance, devices, high risk, and low risk

D : Security, change, high risk, and low risk

Answer: B

Question 2

Which three ports can be used to send Syslogs to FortiSIEM? (Choose three.)

Options :

A : UDP9999

B : UDP 162

C : TCP 514

D : UDP 514

E : TCP 1470

Answer: C,D,E

Question 3

An administrator is using SNMP and WMI credentials to discover a Windows device. How will the WMI method handle this?

Options :

A : WMI method will collect only traffic and IIS logs.

B : WMI method will collect only DNS logs.

C : WMI method will collect only DHCP logs.

D : WMI method will collect security, application, and system events logs.

Answer: A

Question 4

Refer to the exhibit.

What do the yellow stars listed in the Monitor column indicate?

Options :

A : A yellow star indicates that a metric was applied during discovery, and data has been collected successfully

B : A yellow star indicates that a metric was applied during discovery, but data collection has not started

C : A yellow star indicates that a metric was applied during discovery, but FortiSIEM is unable to collect data.

D : A yellow star indicates that a metric was not applied during discovery and, therefore, FortiSEIM was unable to collect data.

Answer: A

Question 5

How is a subparttern for a rule defined?

Options :

A : Filters Aggregation. Group By definition

B : Filters Group By definitions. Threshold

C : Filters Threshold Time Window definitions

D : Filters Aggregation Time Window definitions

Answer: D

Smartly Prepare Exam with Free Online NSE5_FSM-6.3 Practice Test