- All Exams Instant Download
Which two FortiSIEM components work together to provide real-time event correlation?
Which two FortiSIEM components work together to provide real-time event correlation?A . Supervisor and workerB . Collector and Windows agentC . Worker and collectorD . Supervisor and collectorView AnswerAnswer: C Explanation: FortiSIEM Architecture: The FortiSIEM architecture includes several components such as Supervisors, Workers, Collectors, and Agents, each playing a distinct...
Which FortiSIEM feature must you use to produce a report on which FortiGate devices in your environment are running which firmware version?
Which FortiSIEM feature must you use to produce a report on which FortiGate devices in your environment are running which firmware version?A . Run an analytic search.B . Run a query using the Inventory tab.C . Run a baseline report.D . Run a CMDB reportView AnswerAnswer: B Explanation: Feature Overview:...
Which value will FortiSIEM use to populate the Event Type field?
Refer to the exhibit. Which value will FortiSIEM use to populate the Event Type field?A . PHL_INFOB . phPerfJobC . PH_DSV_MON_SYS_DISK_UTILD . diskUtilView AnswerAnswer: A Explanation: Event Type Population: In FortiSIEM, the Event Type field is populated based on specific identifiers within the raw message or event log. Raw Message...
