Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
 

Fortinet NSE5_FSM-5.2 Exam Actual Questions

The questions for NSE5_FSM-5.2 were last updated on July 22, 2024.
  • Viewing page 1 out of 10 pages.
  • Viewing questions 1-4 out of 38 questions

Topic 1 - Exam A

Question #1 Topic 1

Refer to the exhibit.

A FortiSIEM administrator wants to group some attributes for a report, but is not able to do so successfully.
As shown in the exhibit, why are some of the fields highlighted in red?

  • A. The Event Receive Time attribute is not available for logs.
  • B. The attribute COUNT (Matched event) is an invalid expression.
  • C. Unique attributes cannot be grouped.
  • D. No RAW Event Log attribute is available for devices.
Reveal Solution Hide Solution   Discussion   5

Correct Answer: C 🗳️

Question #2 Topic 1

In the rules engine, which condition instructs FortiSIEM to summarize and count the matching evaluated data?

  • A. Time Window
  • B. Aggregation
  • C. Group By
  • D. Filters
Reveal Solution Hide Solution   Discussion   4

Correct Answer: C 🗳️

Question #3 Topic 1

Refer to the exhibit.

How was the FortiGate device discovered by FortiSIEM?

  • A. Through GUI log discovery
  • B. Through syslog discovery
  • C. Using the pull events method
  • D. Through auto log discovery
Reveal Solution Hide Solution   Discussion   4

Correct Answer: A 🗳️

Question #4 Topic 1

Refer to the exhibit.

If events are grouped by Reporting IP, Event Type, and user attributes in FortiSIEM, how many results will be displayed?

  • A. Seven results will be displayed.
  • B. Three results will be displayed.
  • C. Unique attribute cannot be grouped.
  • D. Five results will be displayed.
Reveal Solution Hide Solution   Discussion   5

Correct Answer: D 🗳️

Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
ex Want to SAVE BIG on Certification Exam Prep?
close
ex Unlock All Exams with ExamTopics Pro 75% Off
  • arrow Choose From 1000+ Exams
  • arrow Access to 10 Exams per Month
  • arrow PDF Format Available
  • arrow Inline Discussions
  • arrow No Captcha/Robot Checks
Limited Time Offer
Ends in