NSE5_FSM-6.3 試験問題を無料オンラインアクセス

An administrator is using SNMP credential only for discovery of a Windows device. How will FortiSIEM handle this?

• A.FortiSIEM will apply a Job to collect security event logs
• B.FortiSIEM will apply a job to collect system event logs.
• C.FortiSIEM will apply system monitor jobs to collect resources data.
• D.FortiSIEM will apply a job to collect application event logs.

In FortiSIEM enterprise licensing mode, it the link between the collector and data center FortiSlEM cluster is down, what happens?

• A.The collector continues performance collection of devices, but slops receiving syslog.
• B.The collector buffers events
• C.The collector drops incoming events like syslog. but stops performance collection.
• D.The collector processes stop, and events ate dropped.

Refer to the exhibit.

How was the FortiGate device discovered by FortiSIEM?

• A.Pull events discovery
• B.GUI log discovery
• C.Auto log discovery
• D.Syslog discovery

What does the Frequency field determine on a rule?

• A.How often the rule will take a clear action.
• B.How often the rule will evaluate the subpattern.
• C.How often the rule will trigger.
• D.How often the rule will trigger for the same condition.

What action must you take to produce a report that indicates which OS version the Windows servers in your environment are running on?

• A.Use the Inventory tab to run a query
• B.Run a CMDB report
• C.Run an analytic search
• D.Run a baseline report