NSE5_FSM-5.2 Exam Training Practice Tests (Fortinet NSE 5

Question 1

Which discovery scan type is prone to miss a device, if the device is quiet and the entry foe that device is not present in the ARP table of adjacent devices?

A. Range scan B. CMDB scan C. Smart scan D. L2 scan

Correct Answer: C

Question 2

What are the minimum memory requirements for the FortiSIEM supervisor virtual appliance, when the proprietary flat file database is used?

A. 32GB RAM B. 64GB RAM C. 16GB RAM D. 24GB RAM

Correct Answer: D

Question 3

If an incident's status is Cleared, what does this mean?

A. The incident was cleared by an operator. B. A clear condition set on a rule was satisfied. C. A security rule issue has been resolved. D. Two hours have passed since the incident occurred and the incident has not reoccurred.

Correct Answer: B

Question 4

In FotiSlEM enterprise licensing mode, if the link between the collector and data center FortiSlEM cluster a down what happens?

A. The collector drops incoming events like syslog. but slops performance collection B. The collector buffers events C. The collector continues performance collection of devices, but stops receiving syslog D. The collector processes stop, and events are dropped

Correct Answer: D

Question 5

Refer to the exhibit.

The FortiSIEM administrator is examining events for two devices to investigate an issue However, the administrator is not getting any results from their search.
Based on the selected fillers shown in the exhibit, why is the search returning no results?

A. The wrong option is selected in the Operator column B. The wrong boolean operator is selected in the Next column C. Parenthesis are missing D. An invalid IP subnet is typed in the Value column

Correct Answer: B

Fortinet NSE 5 - FortiSIEM 5.2 - NSE5_FSM-5.2 Exam Practice Test