An administrator is in the process ofrenewing a FortiSIEM license. Which two commands will provide thesystem ID? (Choose two.)

• A.phgetHWID
• B../phLicenseTool - support
• C.phgetUUID
• D../phLicenseTool-show

Comment: *

Name: *

Email: *

Verification: *

A FortiSIEM administrator wants to collect both SIEM event logs and performance and availability metrics (PAM) events from a Microsoft Windows server
Which protocol should the administrator select in the AccessProtocoI drop-down list so that FortiSIEM will collect both SIEM and PAM events?

• A.WMI
• B.LDAPS
• C.LDAP start TLS
• D.TELNET

Comment: *

Name: *

Email: *

Verification: *

What are the four possible incident status values?

• A.Active, closed, manual, resolved
• B.Active, auto cleared, manual, false positive
• C.Active, cleared, cleared manually, system cleared
• D.Active, dosed, cleared, open

Comment: *

Name: *

Email: *

Verification: *

Which is a requirement for implementing FortiSIEM disaster recovery?

• A.All worker nodes must access both supervisor nodes using IP.
• B.SNMP, and WMI ports must be open between the two supervisor nodes.
• C.The two supervisor nodes must have layer 2 connectivity.
• D.DNS names must be used for the worker upload addresses.

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to search for events received from Linux and Windows agents.
Which attribute should the administrator use in search filters, to view events received from agents only?

• A.External Event Receive Raw Logs
• B.External Event Receive Agents
• C.Event Received Proto Agents
• D.External Event Receive Protocol

Comment: *

Name: *

Email: *

Verification: *