Which protocol is almost always required for the FortiSIEM GUI discovery process?

• A.SNMP
• B.WMI
• C.Syslog
• D.Telnet

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The FortiSIEM administrator is examining events for two devices to investigate an issue However, the administrator is not getting any results from their search.
Based on the selected fillers shown in the exhibit, why is the search returning no results?

• A.The wrong option is selected in the Operator column
• B.An invalid IP subnet is typed in the Value column
• C.The wrong boolean operator is selected in the Next column
• D.Parenthesis are missing

Comment: *

Name: *

Email: *

Verification: *

Which three ports can be used to send Syslogs to FortiSIEM? (Choose three.)

• A.UDP 514
• B.TCP 514
• C.UDP9999
• D.UDP 162
• E.TCP 1470

Comment: *

Name: *

Email: *

Verification: *

If a performance rule is triggered repeatedly due to high CPU use. what occurs m the incident table?

• A.The incident status changes to Repeated and the First Seen and Last Seen times are updated.
• B.A new incident is created each time the rule is triggered, and the First Seen and Last Seen times are updated.
• C.The Incident Count value increases, and the First Seen and Last Seen tomes update
• D.A new incident is created based on the Rule Frequency value, and the First Seen and Last Seen times are updated

Comment: *

Name: *

Email: *

Verification: *

If an incident's status is Cleared, what does this mean?

• A.The incident was cleared by an operator.
• B.Two hours have passed since the incident occurred and the incident has not reoccurred.
• C.A clear condition set on a rule was satisfied.
• D.A security rule issue has been resolved.

Comment: *

Name: *

Email: *

Verification: *