Free Preparation Discussions
MENU
Fortinet Exam NSE5_FSM-6.3 Topic 2 Question 13 Discussion
Topic #: 2
Refer to the exhibit.
A FortiSIEM administrator wants to collect both SIEM event logs and performance and availability metrics (PAM) events from a Microsoft Windows server
Which protocol should the administrator select in the Access Protocol drop-down list so that FortiSIEM will collect both SIEM and PAM events?
Collecting SIEM and PAM Events: To collect both SIEM event logs and Performance and Availability Monitoring (PAM) events from a Microsoft Windows server, a suitable protocol must be selected.
WMI Protocol: Windows Management Instrumentation (WMI) is the appropriate protocol for this task.
SIEM Event Logs: WMI can collect security, application, and system logs from Windows devices.
PAM Events: WMI can also gather performance metrics, such as CPU usage, memory utilization, and disk activity.
Comprehensive Data Collection: Using WMI ensures that both types of data are collected efficiently from the Windows server.
Reference: FortiSIEM 6.3 User Guide, Data Collection Methods section, which details the use of WMI for collecting various types of logs and performance metrics.
Martina
1 months agoCammy
1 months agoBethanie
2 months agoHailey
14 days agoLauna
26 days agoTaryn
26 days agoJade
2 months agoMaryln
2 months agoAnnelle
24 days agoRosann
27 days agoTanja
1 months agoViola
2 months agoJunita
2 months agoCamellia
2 months ago