[Jun-2022] NSE 5 Network Security Analyst NSE5_FSM-5.2 Exam Practice Dumps [Q22-Q37]

NEW QUESTION 22
Refer to the exhibit.

A FortiSlEM administrator wants to group some attributes for a report, but is not able to do so successfully.
As shown in the exhibit, why are some of the fields highlighted in red?

NEW QUESTION 23
What is the best discovery scan option for a network environment where ping is disabled on all network devices?

NEW QUESTION 24
What is a prerequisite for FortiSIEM Linux agent installation?

NEW QUESTION 25
Device discovery information is stored in which database?

NEW QUESTION 26
A FortiSIEM administrator wants to restrict a network administrator to running searches for only firewall devices. Under role management, which option does the FortiSIEM administrator need to configure to achieve this scenario?

NEW QUESTION 27
Refer to the exhibit.

If events are grouped by Reporting IP, Event Type, and user attributes in FortiSIEM, how ,many results will be displayed?

NEW QUESTION 28
Which command displays the Linux agent status?

NEW QUESTION 29
What are the four possible incident status values?

NEW QUESTION 30
Refer to the exhibit.

The FortiSIEM administrator is examining events for two devices to investigate an issue However, the administrator is not getting any results from their search.
Based on the selected fillers shown in the exhibit, why is the search returning no results?

NEW QUESTION 31
Refer to the exhibit.

If events are grouped by Event Receive Time, Reporting IP, and User attributes in FortiSIEM, how many results will be displayed?

NEW QUESTION 32
Which process converts Raw log data to structured data?

NEW QUESTION 33
What protocol can be used to collect Windows event logs in an agentless method?

NEW QUESTION 34
An administrator wants to search for events received from Linux and Windows agents.
Which attribute should the administrator use in search filters, to view events received from agents only.

NEW QUESTION 35
In the rules engine, which condition instructs FortiSIEM to summarize and count the matching evaluated data?

NEW QUESTION 36
Refer to the exhibit.

What do the yellow stars listed in the Monitor column indicate?

NEW QUESTION 37
Which database is used for storing anomaly data, that is calculated for different parameters, such as traffic and device resource usage running averages, and standard deviation values?