Fortinet NSE 5 - FortiSIEM 5.2 認定 NSE5_FSM-5.2 試験問題:

1. Device discovery information is stored in which database?

A) Event DB
B) SVN DB
C) CMDB
D) Profile DB

2. What operating system is FortiSIEM based on?

A) Ubuntu
B) Microsoft Windows
C) Cent OS
D) RedHat

3. If a performance rule is triggered repeatedly due to high CPU use. what occurs m the incident table?

A) A new incident is created based on the Rule Frequency value, and the First Seen and Last Seen times are updated
B) The incident status changes to Repeated and the First Seen and Last Seen times are updated.
C) A new incident is created each time the rule is triggered, and the First Seen and Last Seen times are updated.
D) The Incident Count value increases, and the First Seen and Last Seen tomes update

4. If the reported packet loss is between 50% and 98%. which status is assigned to the device in the Availability column of summary dashboard?

A) Degraded status is assigned because of packet loss
B) Down status is assigned because of packet loss.
C) Up status is assigned because of received packets
D) Critical status is assigned because of reduction in number of packets received

5. In FotiSlEM enterprise licensing mode, if the link between the collector and data center FortiSlEM cluster a down what happens?

A) The collector drops incoming events like syslog. but slops performance collection
B) The collector continues performance collection of devices, but stops receiving syslog
C) The collector buffers events
D) The collector processes stop, and events are dropped

質問と回答：