nerdexam
Fortinet

NSE5_FSM-6.3 · Question #39

Refer to the exhibit. If events are grouped by Reporting IP, Event Type, and user attributes in FortiSIEM, how ,many results will be displayed?

The correct answer is A. Seven results will be displayed. Grouping Events: Grouping events by specific attributes allows for the aggregation of similar Grouping Criteria: For this question, events are grouped by "Reporting IP," "Event Type," and "User." Unique Combinations Analysis: 10.10.10.10, Failed Logon, Ryan, 1.1.1.1, Web App…

Reports and dashboards

Question

Refer to the exhibit. If events are grouped by Reporting IP, Event Type, and user attributes in FortiSIEM, how ,many results will be displayed?

Exhibits

NSE5_FSM-6.3 question #39 exhibit 1
NSE5_FSM-6.3 question #39 exhibit 2

Options

  • ASeven results will be displayed.
  • BThere results will be displayed.
  • CUnique attribute cannot be grouped.
  • DFive results will be displayed.

How the community answered

(48 responses)
  • A
    79% (38)
  • B
    13% (6)
  • C
    6% (3)
  • D
    2% (1)

Explanation

Grouping Events: Grouping events by specific attributes allows for the aggregation of similar Grouping Criteria: For this question, events are grouped by "Reporting IP," "Event Type," and "User." Unique Combinations Analysis: 10.10.10.10, Failed Logon, Ryan, 1.1.1.1, Web App 10.10.10.11, Failed Logon, John, 5.5.5.5, DB 10.10.10.10, Failed Logon, Ryan, 1.1.1.1, Web App (duplicate, counted as one unique result) 10.10.10.10, Failed Logon, Paul, 3.3.2.1, Web App 10.10.10.11, Failed Logon, Ryan, 1.1.1.15, DB 10.10.10.11, Failed Logon, Wendy, 1.1.1.6, DB 10.10.10.10, Failed Logon, Ryan, 1.1.1.15, DB Result Calculation: There are seven unique combinations based on the specified grouping

Topics

#event grouping#group by attributes#search results#data aggregation

Community Discussion

No community discussion yet for this question.

Full NSE5_FSM-6.3 Practice