FCSS_ADA_AR-6.7 · Question #58
Refer to the exhibit. Is the Windows agent delivering event logs correctly?
The correct answer is D. The agent is not sending logs because it did not receive a monitoring template. The Windows agent (fortibank_dc.fortibank.net) is in an "Unmanaged" state, which indicates that it has not received a monitoring template from FortiSIEM. Without a template, the agent does not know what logs to collect or forward, meaning it is not sending logs to the…
Question
Refer to the exhibit. Is the Windows agent delivering event logs correctly?
Exhibit
Options
- AThe agent is registered and it is sending logs correctly.
- BThe logs are buffered by the agent and will be sent once the status changes to managed.
- CBecause the agent is unmanaged. the logs are dropped silently by the supervisor.
- DThe agent is not sending logs because it did not receive a monitoring template.
How the community answered
(31 responses)- A3% (1)
- B16% (5)
- C10% (3)
- D71% (22)
Explanation
The Windows agent (fortibank_dc.fortibank.net) is in an "Unmanaged" state, which indicates that it has not received a monitoring template from FortiSIEM. Without a template, the agent does not know what logs to collect or forward, meaning it is not sending logs to the supervisor. The agent is registered, meaning it has completed the installation and connection process. Since it is unmanaged, it is not actively monitored or configured to send logs. To resolve this, the administrator must assign a monitoring template to enable proper log forwarding.
Topics
Community Discussion
No community discussion yet for this question.