What is the best discovery scan option for a network environment where ping is disabled on all network devices?

• A.Smart scan
• B.CMDB scan
• C.Range scan
• D.L2 scan

Comment: *

Name: *

Email: *

Verification: *

In FotiSlEM enterprise licensing mode, if the link between the collector and data center FortiSlEM cluster a down what happens?

• A.The collector continues performance collection of devices, but stops receiving syslog
• B.The collector buffers events
• C.The collector processes stop, and events are dropped
• D.The collector drops incoming events like syslog. but slops performance collection

Comment: *

Name: *

Email: *

Verification: *

Which three ports can be used to send Syslogs to FortiSIEM? (Choose three.)

• A.UDP9999
• B.TCP 1470
• C.UDP 162
• D.UDP 514
• E.TCP 514

Comment: *

Name: *

Email: *

Verification: *

Which process converts Raw log data to structured data?

• A.Data parsing
• B.Data enrichment
• C.Data classification
• D.Data validation

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to search for events received from Linux and Windows agents.
Which attribute should the administrator use in search filters, to view events received from agents only.

• A.External Event Receive Protocol
• B.External Event Receive Agents
• C.External Event Receive Raw Logs
• D.Event Received Proto Agents

Comment: *

Name: *

Email: *

Verification: *