Exam NSE5_FSM-5.2 topic 1 question 18 discussion

Actual exam question from Fortinet's NSE5_FSM-5.2

Question #: 18
Topic #: 1

Refer to the exhibit.

A FortiSIEM administrator wants to collect both SIEM event logs and performance and availability metrics (PAM) events from a Microsoft Windows server.
Which protocol should the administrator select in the Access Protocol drop-down list so that FortiSIEM will collect both SIEM and PAM events?

A. TELNET
B. WMI
C. LDAPS
D. LDAP start TLS

Show Suggested Answer

Suggested Answer: A 🗳️

by idline_network at June 5, 2023, 10:37 a.m.

Comments

Submit Cancel

[Removed]

1 year, 3 months ago

Selected Answer: B

B is the Correct Answer refering to the study guide page 132 not A "Most customers use a WMI credential to collectdata from win devices... WMI is used for both SIEM events collection and collection of performance and availability metrics."

upvoted 1 times

...