NSE5_FSM-5.2 Free Practice Test

In FotiSlEM enterprise licensing mode, if the link between the collector and data center FortiSlEM cluster a down what happens?

1. A. The collector drops incoming events like syslo
2. B. but slops performance collection
3. C. The collector continues performance collection of devices, but stops receiving syslog
4. D. The collector buffers events
5. E. The collector processes stop, and events are dropped

Correct Answer: D

Which FortiSIEM components are capable of performing device discovery?

1. A. FortiSIEM Windows agent
2. B. Worker
3. C. FortiSIEM Linux agent
4. D. Collector

Correct Answer: D

Refer to the exhibit.

The FortiSIEM administrator is examining events for two devices to investigate an issue However, the administrator is not getting any results from their search.
Based on the selected fillers shown in the exhibit, why is the search returning no results?

1. A. Parenthesis are missing
2. B. The wrong boolean operator is selected in the Next column
3. C. The wrong option is selected in the Operator column
4. D. An invalid IP subnet is typed in the Value column

Correct Answer: B