Fortinet NSE 5 NSE5_FSM-5.2 Free Online Dumps

dumps2021-09-08T06:49:46+08:00

NSE5_FSM-5.2 exam is one related test for Fortinet NSE 5 certification. If you want to pass Fortinet certification NSE5_FSM-5.2 exam in a short time, study the free online Fortinet NSE5_FSM-5.2 dumps. We provide the latest Fortinet certification NSE5_FSM-5.2 exam dumps questions below for you to practice anytime and anywhere.

Page 1 of 1

1. Which FortiSIEM components can do performance availability and performance monitoring?

Supervisor, worker, and collector

Supervisor and workers only

Supervisor only

Collectors only

2. Refer to the exhibit.

A FortiSlEM administrator wants to group some attributes for a report, but is not able to do so successfully.

As shown in the exhibit, why are some of the fields highlighted in red?

The Event Receive Time attribute is not available for logs.

The attribute COUNT(Matched event) is an invalid expression.

Unique attributes cannot be grouped.

No RAW Event Log attribute is available for devices.

3. What are the minimum memory requirements for the FortiSIEM supervisor virtual appliance, when the proprietary flat file database is used?

16GB RAM

32GB RAM

64GB RAM

24GB RAM

4. An administrator wants to search for events received from Linux and Windows agents.

Which attribute should the administrator use in search filters, to view events received from agents only?

External Event Receive Protocol

Event Received Proto Agents

External Event Receive Raw Logs

External Event Receive Agents

5. Which protocol is almost always required for the FortiSIEM GUI discovery process?

SNMP

WMI

Syslog

Telnet

6. Which item is required to register a FortiSIEM appliance license?

Static storage

Static MAC address

Static IP address

Static Hardware ID

7. Refer to the exhibit.

A FortiSIEM is continuously receiving syslog events from a FortiGate firewall The FortiSlfcM administrator is trying to search the raw event logs for the last two hours that contain the keyword tcp . However, the administrator is getting no results from the search.

Based on the selected filters shown in the exhibit, why are there no search results?

The keyword is case sensitive Instead of typing TCP in the Value field. the administrator should type tcp.

In the Time section, the administrator selected the Relative Last option, and in the drop-down lists, selected 2 and Hours as the lime period The time period should be 24 hours.

The administratorselected - inthe Operator column That a the wrong operator.

The administrator selected AND in the Nextdrop-down list. Thisis the wrong boolean operator.

8. Which database is used for storing anomaly data, that is calculated for different parameters, such as traffic and device resource usage running averages, and standard deviation values?

Profile DB

Event DB

CMDB

SVN DB

9. Refer to the exhibit.

The FortiSIEM administrator is examining events for two devices to investigate an issue However, the administrator is not getting any results from their search.

Based on the selected fillers shown in the exhibit, why is the search returning no results?

Parenthesis are missing

The wrong boolean operator is selected in the Next column

The wrong option is selected in the Operator column

An invalid IP subnet is typed in the Value column

10. Device discovery information is stored in which database?

CMDB

Profile DB

Event DB

SVN DB

11. What are the four categories of incidents?

Devices, users, high risk, and low risk

Performance, availability, security, and change

Performance, devices, high risk, and low risk

Security, change, high risk, and low risk

12. To determine whether or not syslog is being received from a network device, which is the best command from the backend?

tcpdump

phDeviceTest

netcat

phSyslogRecorder

13. What operating system is FortiSIEM based on?

Cent OS

Microsoft Windows

RedHat

Ubuntu

14. A FortiSIEM supervisor at headquarters is struggling to keep up with an increase of EPS (Events Per Second) being reported across the enterprise.

What components should an administrator consider deploying to assist the supervisor with processing data?

Supervisor

Worker

Collector

Agent

15. What protocol can be used to collect Windows event logs in an agentless method?

SSH

SNMP

WMI

SMTP

16. If the reported packet loss is between 50% and 98%. which status is assigned to the device in the Availability column of summary dashboard?

Down status is assigned because of packet loss.

Up status is assigned because of received packets

Critical status is assigned because of reduction in number of packets received

Degraded status is assigned because of packet loss

Fortinet NSE 5 NSE5_FSM-5.2 Free Online Dumps

Fortinet NSE 5 NSE5_FSM-5.2 Free Online Dumps

Share this post

Leave a Reply Cancel reply

Related Posts