Fortinet NSE 5 - FortiSIEM 5.2 - NSE5_FSM-5.2 Exam Practice Test

Question 1

Which discovery scan type is prone to miss a device, if the device is quiet and the entry foe that device is not present in the ARP table of adjacent devices?

A. L2 scan

B. CMDB scan

C. Smart scan

D. Range scan

Correct Answer: C

Question 2

Which two export methods are available for FortiSIEM analytics results? (Choose two.)

A. HTML

B. PDF

C. PNG

D. CSV

Correct Answer: B,D

Question 3

Which command displays the Linux agent status?

A. Service fsm-linux-agent status

B. Service fortisiem-linux-agent status

C. Service linux-agent status

D. Service Ao-linux-agent status

Correct Answer: B

Question 4

If a performance rule is triggered repeatedly due to high CPU use. what occurs m the incident table?

A. The incident status changes to Repeated and the First Seen and Last Seen times are updated.

B. The Incident Count value increases, and the First Seen and Last Seen tomes update

C. A new incident is created each time the rule is triggered, and the First Seen and Last Seen times are updated.

D. A new incident is created based on the Rule Frequency value, and the First Seen and Last Seen times are updated

Correct Answer: C

Question 5

Which FortiSIEM components can do performance availability and performance monitoring?

A. Supervisor only

B. Supervisor and workers only

C. Collectors only

D. Supervisor, worker, and collector

Correct Answer: D

Fortinet NSE 5 - FortiSIEM 5.2 - NSE5_FSM-5.2 Exam Practice Test

Latest Update

Useful Links

Contact Us