Fortinet NSE 5 - FortiSIEM 6.3 - NSE5_FSM-6.3 Exam Questions [2026]

QUESTION NO: 1
In which state can a device be moved into the CMDB to prevent monitoring log collection?

A. Void B. Unmanaged C. Unapproved D. Pending

Correct Answer: B

QUESTION NO: 2
Which process converts raw log data to structured data?

A. Data classification B. Data parsing C. Data validation D. Data enrichment

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Refer to the exhibit.

Which section contains the sortings that determine how many incidents are created?

A. Group By B. Filters C. Aggregate D. Actions

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
What is a prerequisite for FortiSIEM Linux agent installation?

A. The auditd service must be installed on the Linux server being monitored B. Both the web server and the audit service must be installed on the Linux server being monitored C. The Linux agent manager server must be installed. D. The web server must be installed on the Linux server being monitored

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Refer to the exhibit.

Which value will FortiSIEM use to populate the Connection Id field?

A. 33909 B. 134 C. 408228 D. The connection ID is not in the raw message.

Correct Answer: C

QUESTION NO: 6
An administrator is using SNMP credential only for discovery of a Windows device. How will FortiSIEM handle this?

A. FortiSIEM will apply a job to collect system event logs. B. FortiSIEM will apply a Job to collect security event logs C. FortiSIEM will apply a job to collect application event logs. D. FortiSIEM will apply system monitor jobs to collect resources data.

Correct Answer: D

QUESTION NO: 7
How is a subparttern for a rule defined?

A. Filters Aggregation. Group By definition B. Filters Aggregation Time Window definitions C. Filters Threshold Time Window definitions D. Filters Group By definitions. Threshold

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).