Free Preparation Discussions
MENU
Fortinet Exam NSE5_FSM-6.3 Topic 2 Question 13 Discussion
Topic #: 2
Refer to the exhibit.
A FortiSIEM administrator wants to collect both SIEM event logs and performance and availability metrics (PAM) events from a Microsoft Windows server
Which protocol should the administrator select in the Access Protocol drop-down list so that FortiSIEM will collect both SIEM and PAM events?
Collecting SIEM and PAM Events: To collect both SIEM event logs and Performance and Availability Monitoring (PAM) events from a Microsoft Windows server, a suitable protocol must be selected.
WMI Protocol: Windows Management Instrumentation (WMI) is the appropriate protocol for this task.
SIEM Event Logs: WMI can collect security, application, and system logs from Windows devices.
PAM Events: WMI can also gather performance metrics, such as CPU usage, memory utilization, and disk activity.
Comprehensive Data Collection: Using WMI ensures that both types of data are collected efficiently from the Windows server.
Reference: FortiSIEM 6.3 User Guide, Data Collection Methods section, which details the use of WMI for collecting various types of logs and performance metrics.
Martina
3 months agoCammy
3 months agoBethanie
3 months agoHailey
2 months agoLauna
3 months agoTaryn
3 months agoJade
4 months agoMaryln
4 months agoAnnelle
3 months agoRosann
3 months agoTanja
3 months agoViola
3 months agoJunita
4 months agoCamellia
4 months ago