1147 お客様のコメント
質問 1：
What are the four possible incident status values?
A. Active, cleared, cleared manually, system cleared
B. Active, auto cleared, manual, false positive
C. Active, closed, manual, resolved
D. Active, dosed, cleared, open
正解：C
質問 2：
Refer to the exhibit.
A FortiSlEM administrator wants to group some attributes for a report, but is not able to do so successfully.
As shown in the exhibit, why are some of the fields highlighted in red?
A. The Event Receive Time attribute is not available for logs.
B. Unique attributes cannot be grouped.
C. The attribute COUNT(Matched event) is an invalid expression.
D. No RAW Event Log attribute is available for devices.
正解：B
質問 3：
Refer to the exhibit.
A FortiSIEM administrator wants to collect both SIEM event logs and performance and availability metrics (PAM) events from a Microsoft Windows server Which protocol should the administrator select in the Access Protocol drop-down list so that FortiSIEM will collect both SIEM and PAM events?
A. WMI
B. LDAPS
C. LDAP start TLS
D. TELNET
正解：D
質問 4：
A FortiSIEM supervisor at headquarters is struggling to keep up with an increase of EPS (Events Per Second) being reported across the enterprise. What components should an administrator consider deploying to assist the supervisor with processing data?
A. Worker
B. Agent
C. Supervisor
D. Collector
正解：A
What are the four possible incident status values?
A. Active, cleared, cleared manually, system cleared
B. Active, auto cleared, manual, false positive
C. Active, closed, manual, resolved
D. Active, dosed, cleared, open
正解：C
質問 2：
Refer to the exhibit.
A FortiSlEM administrator wants to group some attributes for a report, but is not able to do so successfully.
As shown in the exhibit, why are some of the fields highlighted in red?
A. The Event Receive Time attribute is not available for logs.
B. Unique attributes cannot be grouped.
C. The attribute COUNT(Matched event) is an invalid expression.
D. No RAW Event Log attribute is available for devices.
正解：B
質問 3：
Refer to the exhibit.
A FortiSIEM administrator wants to collect both SIEM event logs and performance and availability metrics (PAM) events from a Microsoft Windows server Which protocol should the administrator select in the Access Protocol drop-down list so that FortiSIEM will collect both SIEM and PAM events?
A. WMI
B. LDAPS
C. LDAP start TLS
D. TELNET
正解：D
質問 4：
A FortiSIEM supervisor at headquarters is struggling to keep up with an increase of EPS (Events Per Second) being reported across the enterprise. What components should an administrator consider deploying to assist the supervisor with processing data?
A. Worker
B. Agent
C. Supervisor
D. Collector
正解：A
小沢** -
実際にこのNSE5_FSM-5.2テキストだけを使用して合格しました。
試験対策としては完璧です。ほぼ出題されました。ありがとうございました。