Fortinet NSE5_FSM-6.3 - Fortinet NSE 5 - FortiSIEM 6.3 Exam
Page: 3 / 7
Total 31 questions
Question #11 (Topic: Exam A)
Refer to the exhibit.
Which section contains the settings that determine how many incidents are created?
Which section contains the settings that determine how many incidents are created?
A. Actions
B. Group By
C. Aggregate
D. Filters
Answer: C
Question #12 (Topic: Exam A)
Refer to the exhibit.
If events are grouped by User, Source IP, and Application Category attributes in FortiSIEM, how many results will be displayed?
If events are grouped by User, Source IP, and Application Category attributes in FortiSIEM, how many results will be displayed?
A. Three results will be displayed.
B. Five results will be displayed.
C. No results will be displayed.
D. Seven results will be displayed.
Answer: B
Question #13 (Topic: Exam A)
Refer to the exhibit.
If events are grouped by Event Type and User attributes in FortiSIEM, how many results will be displayed?
If events are grouped by Event Type and User attributes in FortiSIEM, how many results will be displayed?
A. Four results will be displayed.
B. Eight results will be displayed.
C. Two results will be displayed.
D. No results will be displayed.
Answer: B
Question #14 (Topic: Exam A)
Which process converts raw log data to structured data?
A. Data classification
B. Data validation
C. Data parsing
D. Data enrichment
Answer: C
Question #15 (Topic: Exam A)
Refer to the exhibit.
What does the pause icon indicate?
What does the pause icon indicate?
A. Data collection is paused after the intervals shown for metrics.
B. Data collection has not started.
C. Data collection execution failed because the device is not reachable.
D. Data collection is paused due to an issue, such as a change of password.
Answer: D
