EMT Practice Test

1. Question Content...

---

Question1: Which command displays the Linux agent status?

Question2: If an incident's status is Cleared, what does this mean?

Question3: Which database is used for storing anomaly data, that is calculated for different parameters, such as traffic and device resource usage running averages, and standard deviation values?

Question4: A FortiSIEM administrator wants to restrict a network administrator to running searches for only firewall devices. Under role management, which option does the FortiSIEM administrator need to configure to achieve this scenario?

Question5: Which two export methods are available for FortiSIEM analytics results? (Choose two.)

Question6: To determine whether or not syslog is being received from a network device, which is the best command from the backend?

Question7: In the advanced analytical rules engine in FortiSIEM, multiple subpatterms can be referenced using which three operation?(Choose three.)

Question8: What is the best discovery scan option for a network environment where ping is disabled on all network devices?

Question9: Which process converts Raw log data to structured data?

Question10: What is a prerequisite for FortiSIEM Linux agent installation?

Question11: Refer to the exhibit.

Three events are collected over a 10-minutc time period from two servers Server A and Server B.
Based on the settings being used for the rule subpattern. how many incidents will the servers generate?

Question12: Which item is required to register a FortiSIEM appliance license?

Question13: What operating system is FortiSIEM based on?

Question14: To determine SNMP discovery issues, which is the best command from the backend?

Question15: Device discovery information is stored in which database?