[Jul-2025] Free NSE5_FSM-6.3 Exam Questions NSE5_FSM-6.3 Actual Free Exam Questions [Q21-Q35]

QUESTION 21
Where do you configure rule notifications and automated remediation on FortiSIEM?

QUESTION 22
What is a prerequisite for FortiSIEM Linux agent installation?

QUESTION 23
Refer to the exhibits.


Three events are collected over a 10-minute time period from two servers: Server A and Server B.
Based on thesettings tor the rule subpattern. how many incidents will the servers generate?

QUESTION 24
What are the four categories of incidents?

QUESTION 25
In me FortiSIEM CLI. which command must you use to determine whether or not syslog is being received from a network device?

QUESTION 26
What can you do with rules on FortiSIEM?

QUESTION 27
In which state can a device be moved into the CMDB to prevent monitoring log collection?

QUESTION 28
Which database is used for storing anomaly data, that is calculated for different parameters, such as traffic and device resource usage running averages, and standard deviation values?

QUESTION 29
Which protocol is almost always required for the FortiSIEM GUI discovery process?

QUESTION 30
In the advanced analytical rules engine in FortiSIEM, multiple subpatterms can be referenced using which three operation?(Choose three.)

QUESTION 31
FortiSIEM administrator wants to group some attributes for a report, but is not able to do so successfully.
As shown in the exhibit, why are some of the fields highlighted in red?

QUESTION 32
An administrator is using SNMP and WMI credentials to discover a Windows device. How will the WMI method handle this?

QUESTION 33
Which two FortiSIEM components work together to provide real-time event correlation?

QUESTION 34
Refer to the exhibits.


Three events are collected over a 10-minute time period from two servers: Server A and Server B.
Based on the settings tor the rule subpattern. how many incidents will the servers generate?

QUESTION 35
Which three ports can be used to send Syslogs to FortiSIEM? (Choose three.)