最新的Fortinet NSE 5 - FortiSIEM 6.3 - NSE5_FSM-6.3免費考試真題
問題1
What are the four categories of incidents?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題2
Refer to the exhibit.
If events are grouped by User. Source IP. and Application Category attributes in FortiSiEM. how many results will be displayed?
If events are grouped by User. Source IP. and Application Category attributes in FortiSiEM. how many results will be displayed?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題3
An administrator is configuring FortiSIEM to discover network devices and receive syslog from network devices. Which statement is correct?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題4
If a performance rule is triggered repeatedly due to high CPU use, what occurs in the incident table?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題5
An administrator defines SMTP as a critical process on a Linux server.
It the SMTP process is stopped. FortiSIEM will generate a critical event with which event type?
It the SMTP process is stopped. FortiSIEM will generate a critical event with which event type?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題6
Refer to the exhibit.
A FortiSIEM administrator wants to collect both SIEM event logs and performance and availability metrics (PAM) events from a Microsoft Windows server Which protocol should the administrator select in the Access Protocol drop-down list so that FortiSIEM will collect both SIEM and PAM events?
A FortiSIEM administrator wants to collect both SIEM event logs and performance and availability metrics (PAM) events from a Microsoft Windows server Which protocol should the administrator select in the Access Protocol drop-down list so that FortiSIEM will collect both SIEM and PAM events?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題7
Which statement about global thresholds and per device thresholds is true?
正確答案: B
說明：（僅 VCESoft 成員可見）
