Which two FortiSIEM components work together to provide real-time event correlation?
Which two FortiSIEM components work together to provide real-time event correlation?
The Supervisor and worker components work together to provide real-time event correlation in FortiSIEM. The Supervisor is responsible for the overall management, correlation, and analysis of data, while the worker nodes perform distributed data processing and initial correlation tasks. This distributed architecture allows for efficient handling of large volumes of events in real-time.
The option correct is D, see page 38 FortiSiem 6.3 Guide
Hello, have you taken this exam? the questions are similar in version 6.3?
But from page 38 it clearly shows the answer to be B
You are right, the answer in the study guide page 38 points that ans is B.
vote B
Answer B: FortiSIEM online help, section Scale-Out Architecture
Is this dump still valid for the corrent exam?