NSE5_FSM-6.3 Exam Questions

What action must you take to produce a report that indicates which OS version the Windows servers in your environment are running on?

Refer to the exhibit. Which value will FortiSIEM use to populate the Connection Id field?

An administrator is using SNMP credential only for discovery of a Windows device. How will FortiSIEM handle this?

If FortiSIEM supervisor is deployed with the worker using the proprietary flat file database, which action is required?

What are two tasks that you must do to make a secondary FortiSIEM device ready for disaster recovery? (Choose two.)

In the CMDB page for a network device, the Configuration tab is unexpectedly empty. Which is a possible reason?

Which statement best describes auto-log discovery?

What can you do with rules on FortiSIEM?

An administrator is investigating the slow performance of a FortiSlEM device. Which command provides information about the CPU usage of FortiSlEM processes, disk usage, and EPS?

Refer to the exhibit. Which section contains the subpattren configuration settings that determine how many matching events are needed to trigger the rule?

Refer to the exhibit. The output shows that the license is in which condition?

Where must you configure rule notifications and automated remediation on FortiSIEM?

In which state can a device be moved into the CMDB to prevent monitoring log collection?

Which statement correctly describes how FortiSIEM uses thresholds for different metrics?

Which two export methods are available for FortiSIEM analytics results? (Choose two.)

What operating system is FortiSIEM based on?

Which is the best command to use to troubleshoot SNMP discovery issues?

Which configuration is required to register a FortiSIEM appliance license?

What is the best discovery scan option for a network environment where ping is disabled on all network devices?