Fortinet NSE5_FSM-5.2 Exam Questions Instant Access

Question 1

Refer to the exhibit.

The FortiSIEM administrator is examining events for two devices to investigate an issue However, the administrator is not getting any results from their search.

Based on the selected fillers shown in the exhibit, why is the search returning no results?

AParenthesis are missing

BThe wrong boolean operator is selected in the Next column

CThe wrong option is selected in the Operator column

DAn invalid IP subnet is typed in the Value column

Answer : B

Question 2

Which command displays the Linux agent status?

AService fsm-linux-agent status

BService Ao-linux-agent status

CService fortisiem-linux-agent status

DService linux-agent status

Answer : C

Question 3

If an incident's status is Cleared, what does this mean?

ATwo hours have passed since the incident occurred and the incident has not reoccurred.

BA clear condition set on a rule was satisfied.

CA security rule issue has been resolved.

DThe incident was cleared by an operator.

Answer : B

Question 4

Which discovery scan type is prone to miss a device, if the device is quiet and the entry foe that device is not present in the ARP table of adjacent devices?

ACMDB scan

BL2 scan

CRange scan

DSmart scan

Answer : D

Question 5

In the advanced analytical rules engine in FortiSIEM, multiple subpatterms can be referenced using which three operation?(Choose three.)

AELSE

BNOT

CFOLLOWED_BY

DOR

EAND

Answer : A, B, E

Question 6

Which item is required to register a FortiSIEM appliance license?

AStaticstorage

BStaticMACaddress

CStaticIPaddress

DStatic Hardware ID

Answer : D

Question 7

Refer to the exhibit.

How was the FortiGate device discovered by FortiSIEM?

AThrough GUI log discovery

BThrough syslog discovery

CUsing the pull events method

DThrough auto log discovery

Answer : A

Fortinet NSE 5 - FortiSIEM 5.2 NSE5_FSM-5.2 Exam Questions