Fortinet NSE5_FSM-5.2 Exam Questions Instant Access

Question 1

What is the best discovery scan option for a network environment where ping is disabled on all network devices?

ASmartscan

BRangescan

CCMDBscan

DL2 scan

Answer : A

Question 2

Refer to the exhibit.

An administrator is trying to identify an issue using an expression bated on the Expression Builder settings shown in the exhibit however, the error message shown in the exhibit indicates that the expression is invalid.

Which is the correct expression?

AMatched Events COUNT()

BMatched Events(COUNT)

CCOUNT(Matched Events)

D(COUNT) Matched Events

Answer : C

Question 3

If the reported packet loss is between 50% and 98%. which status is assigned to the device in the Availability column of summary dashboard?

ADown status is assigned because of packet loss.

BUp status is assigned because of received packets

CCritical status is assigned because of reduction in number of packets received

DDegraded status is assigned because of packet loss

Answer : D

Question 4

Refer to the exhibit.

If events are grouped by Event Receive Time, Reporting IP, and User attributes in FortiSIEM, how many results will be displayed?

AEight results will be displayed

BFour results will be displayed

CTwo results will be displayed

DUnique attributes cannot be grouped

Answer : D

Question 5

Which command displays the Linux agent status?

AService fsm-linux-agent status

BService Ao-linux-agent status

CService fortisiem-linux-agent status

DService linux-agent status

Answer : C

Question 6

Which FortiSIEM components can do performance availability and performance monitoring?

ASupervisor, worker, and collector

BSupervisor and workers only

CSupervisor only

DCollectors only

Answer : A

Question 7

Which process converts Raw log data to structured data?

AData enrichment

BData classification

CData parsing

DData validation

Answer : C

Fortinet NSE 5 - FortiSIEM 5.2 NSE5_FSM-5.2 Exam Questions