Fortinet NSE5_FSM-5.2 Exam Questions Instant Access

Question 1

Which FortiSIEM components can do performance availability and performance monitoring?

ASupervisor, worker, and collector

BSupervisor and workers only

CSupervisor only

DCollectors only

Answer : A

Question 2

What operating system is FortiSIEM based on?

ACentOS

BMicrosoftWindows

CRedHat

DUbuntu

Answer : A

Question 3

What are the four categories of incidents?

ADevices, users, high risk, and low risk

BPerformance, availability, security, and change

CPerformance, devices, high risk, and low risk

DSecurity, change, high risk, and low risk

Answer : B

Question 4

What is a prerequisite for FortiSIEM Linux agent installation?

AThe web server must be installed on the Linux server being monitored

BThe auditd service must be installed on the Linux server being monitored

CThe Linux agent manager server must be installed.

DBoth the web server and the audit service must be installed on the Linux server being monitored

Answer : D

Question 5

To determine SNMP discovery issues, which is the best command from the backend?

Asnmpwalk

BphSNMPTest

Csnmptest

Dssh

Answer : A

Question 6

An administrator defines SMTP as a critical process on a Linux server. If the SMTP process is stopped, FortiSIEM would generate a critical event with which event type?

APH_DEV_MON_PROC_STOP

BPostfix-Mail-Slop

CGeneric_SMTP_Process_Exit

DPH_DEV_MON_SMTP_STOP

Answer : A

Question 7

What are the four possible incident status values?

AActive, dosed, cleared, open

BActive, cleared, cleared manually, system cleared

CActive, closed, manual, resolved

DActive, auto cleared, manual, false positive

Answer : C

Fortinet NSE 5 - FortiSIEM 5.2 NSE5_FSM-5.2 Exam Questions