最新的Fortinet NSE5_FSM-6.3免費考試真題

問題1

Refer to the exhibit.

What does the pauso icon indicate?

A. Data collection is paused after the intervals shown for metrics.

B. Data collection is paused duo to an issue, such as a change of password.

C. Data collection has not started.

D. Data collection execution failed because the device is not reachable.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題2

If an incident's status is Cleared, what does this mean?

A. The incident was cleared by an operator.

B. A clear condition set on a rule was satisfied.

C. Two hours have passed since the incident occurred and the incident has not reoccurred.

D. A security rule issue has been resolved.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題3

In the CMDB page for a network device, the Configuration tab is unexpectedly empty. Which is a possible reason?

A. Configuration push is not enabled on the network device.

B. A Telnet/SSH credential was not configured for discovery.

C. The SNMP credential was a read-only credential.

D. Syslog was only being sent to a worker.

正確答案: B

問題4

When configuring collectors located in geographically separated sites, what ports must be open on a front end firewall?

A. HTTPS, from the Internet to the collector and from the collector to the FortiSIEM cluster

B. HTTPS, from the collector to the worker upload settings address only

C. HTTPS, from the collector to the supervisor and worker upload settings addresses

D. HTTPS, from the Internet to the collector

正確答案: C

說明：（僅 Fast2test 成員可見）

問題5

If a performance rule is triggered repeatedly due to high CPU use, what occurs in the incident table?

A. The incident status changes to Repeated, and the First Seen and Last Seen times are updated.

B. The Incident Count value increases, and the First Seen and Last Seen times update.

C. A now incident is created each time the rule is triggered. and the First Seen and Last Seen times are updated.

D. A new incident is created based on the Rule Frequency value, and the First Seen and Last Seen times ate updated.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題6

Refer to the exhibit.

A FortiSIEM is continuously receiving syslog events from a FortiGate firewall The FortiSlfcM administrator is trying to search the raw event logs for the last two hours that contain the keyword tcp . However, the administrator is getting no results from the search.
Based on the selected filters shown in the exhibit, why are there no search results?

A. The administrator selected - in the Operator column That a the wrong operator.

B. The keyword is case sensitive Instead of typing TCP in the Value field. the administrator should type tcp.

C. In the Time section, the administrator selected the Relative Last option, and in the drop-down lists, selected 2 and Hours as the lime period The time period should be 24 hours.

D. The administrator selected AND in the Next drop-down list. This is the wrong boolean operator.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題7

Which two FortiSIEM components work together to provide real-time event correlation?

A. Supervisor and worker

B. Supervisor and collector

C. Worker and collector

D. Collector and Windows agent

正確答案: C

說明：（僅 Fast2test 成員可見）

最新的Fortinet NSE 5 - FortiSIEM 6.3 - NSE5_FSM-6.3免費考試真題

聯系我們

站內鏈接

最新更新