Online Access Free NSE5_FSM-5.2 Practice Test

Device discovery information is stored in which database?

• A.Profile DB
• B.CMDB
• C.SVN DB
• D.Event DB

What protocol can be used to collect Windows event logs in an agentless method?

• A.SMTP
• B.WMI
• C.SNMP
• D.SSH

An administrator defines SMTP as a critical process on a Linux server. If the SMTP process is stopped, FortiSIEM would generate a critical event with which event type?

• A.Generic_SMTP_Process_Exit
• B.Postfix-Mail-Slop
• C.PH_DEV_MON_PROC_STOP
• D.PH_DEV_MON_SMTP_STOP

What are the four possible incident status values?

• A.Active, closed, manual, resolved
• B.Active, auto cleared, manual, false positive
• C.Active, dosed, cleared, open
• D.Active, cleared, cleared manually, system cleared

If an incident's status is Cleared, what does this mean?

• A.A clear condition set on a rule was satisfied.
• B.The incident was cleared by an operator.
• C.Two hours have passed since the incident occurred and the incident has not reoccurred.
• D.A security rule issue has been resolved.