EMT Practice Test

1. Question Content...

---

Question1: Refer to the exhibit.

If events are grouped by Reporting IP, Event Type, and user attributes in FortiSIEM, how ,many results will be displayed?

Question2: Which FortiSIEM feature must you use to produce a report on which FortiGate devices in your environment are running which firmware version?

Question3: Refer to the exhibit.

A FortiSIEM administrator wants to group some attributes for a report, but is not able to do so successfully.
As shown in the exhibit, why are some of the fields highlighted in red?

Question4: Where do you configure rule notifications and automated remediation on FortiSIEM?

Question5: In FortiSIEM enterprise licensing mode, it the link between the collector and data center FortiSlEM cluster is down, what happens?

Question6: Refer to the exhibit.

Which value will FortiSIEM use to populate theEvent Type field?

Question7: Which process converts raw log data to structured data?

Question8: What are the four categories of incidents?

Question9: Refer to the exhibit.

What does the pauso icon indicate?

Question10: Which statement about global thresholds and per device thresholds is true?

Question11: What are the four categories of incidents?

Question12: Device discovery information is stored in which database?

Question13: An administrator is using SNMP and WMI credentials to discover a Windows device. How will the WMI method handle this?

Question14: In me FortiSIEM CLI. which command must you use to determine whether or not syslog is being received from a network device?

Question15: What are the four possible incident status values?

Question16: Refer to the exhibit.

What do the yellow stars listed in the Monitor column indicate?

Question17: Which FortiSIEM feature must you use to produce a report on which FortiGate devices in your environment are running which firmware version?

Question18: Which FortiSIEM components are capable of performing device discovery?

Question19: Consider thestorage of anomaly baseline date that is calculated for different parameters. Which database is used for storing this data?

Question20: Refer to the exhibit.

If events are grouped by User. Source IP. and Application Category attributes in FortiSiEM. how many results will be displayed?

Question21: Refer to the exhibit.

It events are grouped by Event Type and User attributes in FortiSIEM. how many results will be displayed?