Free NSE5_FSM-5.2 Exam Dumps

No Installation Required, Instantly Prepare for the NSE5_FSM-5.2 exam and please click the below link to start the NSE5_FSM-5.2 Exam Simulator with a real NSE5_FSM-5.2 practice exam questions.
Use directly our on-line NSE5_FSM-5.2 exam dumps materials and try our Testing Engine to pass the NSE5_FSM-5.2 which is always updated.

Exam Code: NSE5_FSM-5.2
Exam Title: Fortinet NSE 5 - FortiSIEM 5.2
Vendor: Fortinet
Exam Questions: 42
Last Updated: November 15th,2024

Question 1

What are the four possible incident status values?

A. Active, dosed, cleared, open
B. Active, cleared, cleared manually, system cleared
C. Active, closed, manual, resolved
D. Active, auto cleared, manual, false positive

Correct Answer:C

Question 2

In FotiSlEM enterprise licensing mode, if the link between the collector and data center FortiSlEM cluster a down what happens?

A. The collector drops incoming events like syslo
B. but slops performance collection
C. The collector continues performance collection of devices, but stops receiving syslog
D. The collector buffers events
E. The collector processes stop, and events are dropped

Correct Answer:D

Question 3

Which protocol is almost always required for the FortiSIEM GUI discovery process?

A. SNMP
B. WMI
C. Syslog
D. Telnet

Correct Answer:A

Question 4

An administrator defines SMTP as a critical process on a Linux server. If the SMTP process is stopped, FortiSIEM would generate a critical event with which event type?

A. PH_DEV_MON_PROC_STOP
B. Postfix-Mail-Slop
C. Generic_SMTP_Process_Exit
D. PH_DEV_MON_SMTP_STOP

Correct Answer:A

Question 5

Refer to the exhibit.
NSE5_FSM-5.2 dumps exhibit
A FortiSIEM is continuously receiving syslog events from a FortiGate firewall The FortiSlfcM administrator is trying to search the raw event logs for the last two hours that contain the keyword tcp . However, the administrator is getting no results from the search.
Based on the selected filters shown in the exhibit, why are there no search results?

A. The keyword is case sensitive Instead of typing TCP in the Value fiel
B. the administrator should type tcp.
C. In the Time section, the administrator selected the Relative Last option, and in the drop-down lists, selected 2 and Hours as the lime period The time period should be 24 hours.
D. The administrator selected - in the Operator column That a the wrong operator.
E. The administrator selected AND in the Next drop-down lis
F. This is the wrong boolean operator.

Correct Answer:C