Fortinet NSE 5 - FortiSIEM 6.3 - NSE5_FSM-6.3 模擬練習
Refer to the exhibit.

The FortiSIEM administrator is examining events for two devices to investigate an issue. However, the administrator is not getting any results from their search.
Based on the selected filters shown in the exhibit, why is the search returning no results?

The FortiSIEM administrator is examining events for two devices to investigate an issue. However, the administrator is not getting any results from their search.
Based on the selected filters shown in the exhibit, why is the search returning no results?
正解: A
解説: (PassTest メンバーにのみ表示されます)
Device discovery information is stored in which database?
正解: B
解説: (PassTest メンバーにのみ表示されます)
How is a subparttern for a rule defined?
正解: B
Refer to the exhibit.

Which value will FortiSIEM use to populate the Connection Id field?

Which value will FortiSIEM use to populate the Connection Id field?
正解: B
Which FortiSIEM feature must you use to produce a report on which FortiGate devices in your environment are running which firmware version?
正解: B
解説: (PassTest メンバーにのみ表示されます)
If a performance rule is triggered repeatedly due to high CPU use, what occurs in the incident table?
正解: A
解説: (PassTest メンバーにのみ表示されます)
Which statement about global thresholds and per device thresholds is true?
正解: B
解説: (PassTest メンバーにのみ表示されます)