最新的Fortinet NSE5_FSM-5.2免費考試真題

問題1

If an incident's status is Cleared, what does this mean?

A. The incident was cleared by an operator.

B. A clear condition set on a rule was satisfied.

C. Two hours have passed since the incident occurred and the incident has not reoccurred.

D. A security rule issue has been resolved.

正確答案: B

問題2

Refer to the exhibit.

Three events are collected over a 10-minutc time period from two servers Server A and Server B.
Based on the settings being used for the rule subpattern. how many incidents will the servers generate?

A. Server A will generate one incident and Server B will not generate any incidents

B. Server A will not generate any incidents and Server B will not generate any incidents

C. Server A will generate one incident and Server B wifl generate one incident

D. Server B will generate one incident and Server A will not generate any incidents

正確答案: B

問題3

In the rules engine, which condition instructs FortiSIEM to summarize and count the matching evaluated data?

A. Time Window

B. Group By

C. Aggregation

D. Filters

正確答案: C

問題4

Which discovery scan type is prone to miss a device, if the device is quiet and the entry foe that device is not present in the ARP table of adjacent devices?

A. Smart scan

B. CMDB scan

C. L2 scan

D. Range scan

正確答案: A

問題5

Which database is used for storing anomaly data, that is calculated for different parameters, such as traffic and device resource usage running averages, and standard deviation values?

A. SVN DB

B. CMDB

C. Event DB

D. Profile DB

正確答案: D

最新的Fortinet NSE 5 - FortiSIEM 5.2 - NSE5_FSM-5.2免費考試真題

聯系我們

站內鏈接

最新更新