NSE5_FSM-6.3 · Question #28
An administrator defines SMTP as a critical process on a Linux server. It the SMTP process is stopped. FortiSIEM will generate a critical event with which event type?
The correct answer is B. PH_DEV_MON_PROC_STOP. Process Monitoring in FortiSIEM: FortiSIEM can monitor critical processes on managed devices, such as an SMTP process on a Linux server. Event Generation: When a critical process stops, FortiSIEM generates an event to alert Event Types: Specific event types correspond to…
Question
An administrator defines SMTP as a critical process on a Linux server. It the SMTP process is stopped. FortiSIEM will generate a critical event with which event type?
Options
- APostfix-Mail-Stop
- BPH_DEV_MON_PROC_STOP
- CPH_DEV_MON_SMTP_STOP
- DGeneric_SMTP_Procoss_Exit
How the community answered
(34 responses)- A6% (2)
- B79% (27)
- C12% (4)
- D3% (1)
Explanation
Process Monitoring in FortiSIEM: FortiSIEM can monitor critical processes on managed devices, such as an SMTP process on a Linux server. Event Generation: When a critical process stops, FortiSIEM generates an event to alert Event Types: Specific event types correspond to different monitored conditions. For a stopped process, the event type PH_DEV_MON_PROC_STOP is used. Reasoning: The name PH_DEV_MON_PROC_STOP (Device Monitoring Process Stop) is a generic event type used by FortiSIEM to indicate that any monitored process, including SMTP,
Topics
Community Discussion
No community discussion yet for this question.