Fortinet Exam NSE5_FSM-6.3 Topic 3 Question 24 Discussion

Actual exam question for Fortinet's NSE5_FSM-6.3 exam

Question #: 24
Topic #: 3

[All NSE5_FSM-6.3 Questions]

If FortiSIEM supervisor is deployed with the worker using the proprietary flat file database, which action is required?

AAn event database must be placed on NFS

BCollectors must be deployed

CA FortiSIEM service provider license must be obtained

DA separate network interface must be used for the storage network

Show Suggested Answer

Suggested Answer: C, D, E

Syslog Ports: Syslog messages can be sent over different ports using TCP or UDP protocols.

Common Ports for Syslog:

UDP 514: This is the default port for sending syslog messages over UDP.

TCP 514: This is the default port for sending syslog messages over TCP, providing a more reliable transmission.

TCP 1470: This port is often used for secure or alternative syslog transmission.

Usage in FortiSIEM: FortiSIEM can be configured to receive syslog messages on these ports to ensure the logs are collected from various network devices.

Reference: FortiSIEM 6.3 User Guide, Syslog Integration section, which details the supported ports for syslog transmission.

by Eura at Apr 08, 2025, 12:21 PM

Limited Time Offer

25%

Off

Get Premium NSE5_FSM-6.3 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stevie

24 days ago

I'm just going to guess D and hope for the best. After all, a separate network interface is the answer to most of life's problems, right?

upvoted 0 times

Kerrie

6 days ago

User1: I think the answer is B) Collectors must be deployed.

upvoted 0 times

...

Sheron

27 days ago

Wait, is it A? An event database must be placed on NFS? That sounds like the most logical solution to me.

upvoted 0 times

...

Val

29 days ago

Haha, I bet the answer is C. A FortiSIEM service provider license must be obtained. That's the kind of trick question they love to throw in!

upvoted 0 times

...

Marshall

1 months ago

Hmm, I was thinking B. Collectors must be deployed. Isn't that how you actually collect the data?

upvoted 0 times

Whitley

22 minutes ago

I think B is correct. Collectors are needed to gather the data.

upvoted 0 times

...

Hassie

2 days ago

D) A separate network interface must be used for the storage network

upvoted 0 times

...

Sylvie

4 days ago

C) A FortiSIEM service provider license must be obtained

upvoted 0 times

...

Moon

6 days ago

C) A FortiSIEM service provider license must be obtained

upvoted 0 times

...

Chanel

8 days ago

B) Collectors must be deployed

upvoted 0 times

...

Ettie

13 days ago

B) Collectors must be deployed

upvoted 0 times

...

Larue

16 days ago

A) An event database must be placed on NFS

upvoted 0 times

...

Katina

20 days ago

A) An event database must be placed on NFS

upvoted 0 times

...

Wayne

1 months ago

I'm pretty sure the answer is D. A separate network interface must be used for the storage network. That's how you isolate the storage traffic from the main network traffic.

upvoted 0 times