We're so confident of our products that we provide no hassle product exchange.
Fortinet NSE5_FSM-5.2 Exam Overview:
| Certification Vendor: | Fortinet |
|---|---|
| Exam Name: | NSE 5 - FortiSIEM 5.2 |
| Exam Number: | NSE5_FSM-5.2 |
| Passing Score: | Pass/Fail |
| Available Languages: | English |
| Exam Format: | Multiple Choice, Multiple Select |
| Real Exam Qty: | 30-33 |
| Related Certifications: | NSE 5 Security Operations NSE 4 Network Security Professional |
| Exam Duration: | 60 minutes |
| Exam Price: | $200 USD |
| Certificate Validity Period: | 2 years |
| Recommended Training: | FortiSIEM 5.2 Administrator Training |
| Exam Registration: | Fortinet Training Institute Pearson VUE Registration |
| Sample Questions: | Fortinet NSE5_FSM-5.2 Sample Questions |
| Exam Way: | Online proctored (OnVUE) or in-person at Pearson VUE test centers |
| Pre Condition: | NSE 4 certification recommended; no mandatory prerequisites |
| Official Syllabus URL: | https://training.fortinet.com/ |
Fortinet NSE5_FSM-5.2 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Monitoring and Operations | 25% | - Performance tuning and maintenance - Event searching and querying - Device discovery and inventory |
| FortiSIEM Architecture and Concepts | 25% | - System components and architecture - Deployment models and requirements - SIEM fundamentals and event classification |
| Installation and Configuration | 25% | - Agent deployment and management - Data collection and log ingestion - Initial setup and system configuration |
| Rules, Incidents and Reporting | 25% | - Incident management and workflow - Rule creation and configuration - Report generation and compliance |
Fortinet NSE 5 - FortiSIEM 5.2 Sample Questions:
Refer to the exhibit.
Three events are collected over a 10-minutc time period from two servers Server A and Server B.
Based on the settings being used for the rule subpattern. how many incidents will the servers generate?
- A. Server A will not generate any incidents and Server B will not generate any incidents
- B. Server A will generate one incident and Server B will not generate any incidents
- C. Server B will generate one incident and Server A will not generate any incidents
- D. Server A will generate one incident and Server B wifl generate one incident
Correct Answer: A 🗳️
Which protocol is almost always required for the FortiSIEM GUI discovery process?
- A. SNMP
- B. WMI
- C. Telnet
- D. Syslog
Correct Answer: A 🗳️
Refer to the exhibit.
If events are grouped by Event Receive Time, Reporting IP, and User attributes in FortiSIEM, how many results will be displayed?
- A. Eight results will be displayed
- B. Unique attributes cannot be grouped
- C. Four results will be displayed
- D. Two results will be displayed
Correct Answer: B 🗳️
Device discovery information is stored in which database?
- A. Profile DB
- B. Event DB
- C. SVN DB
- D. CMDB
Correct Answer: D 🗳️
If the reported packet loss is between 50% and 98%. which status is assigned to the device in the Availability column of summary dashboard?
- A. Up status is assigned because of received packets
- B. Critical status is assigned because of reduction in number of packets received
- C. Degraded status is assigned because of packet loss
- D. Down status is assigned because of packet loss.
Correct Answer: C 🗳️
Viewing page 1 out of 9 pages.
Viewing questions 1-5 out of 43 questions.
By Beau
