nse5_fsm-52 Exam QuestionsBrowse all questions from this exam

nse5_fsm-52 Exam - Question 7


Refer to the exhibit.

If events are grouped by Event Receive Time, Reporting IP, and User attributes in FortiSIEM, how many results will be displayed?

Show Answer
Correct Answer: BD

When events are grouped by Event Receive Time, Reporting IP, and User attributes, the number of unique combinations of these three attributes determine the number of results. From the given exhibit, the unique combinations are: (09:12:11, 10.10.10.10, Ryan), (09:12:56, 10.10.10.11, John), (09:15:56, 10.10.10.10, Ryan), (09:20:01, 10.10.10.10, Paul), (10:10:43, 10.10.10.11, Ryan), (10:45:08, 10.10.10.11, Wendy), (11:23:33, 10.10.10.10, Ryan), and (12:05:52, 10.10.10.10, Ryan). There are eight events listed, but there are four unique groups: (10.10.10.10, Ryan), (10.10.10.11, John), (10.10.10.10, Paul), and (10.10.10.11, Wendy). Therefore, four results will be displayed.

Discussion

3 comments
Sign in to comment
SIEM23Option: D
May 10, 2023

I Think D,

LutechOption: D
Aug 25, 2023

D is correct

qtygbapjpesdayazko
Apr 8, 2024

Is this dump still valid for the corrent exam?