BlackFriday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam NSE5_FSM-6.3 Topic 6 Question 7 Discussion

Actual exam question for Fortinet's NSE5_FSM-6.3 exam
Question #: 7
Topic #: 6
[All NSE5_FSM-6.3 Questions]

In FortiSIEM enterprise licensing mode, it the link between the collector and data center FortiSlEM cluster is down, what happens?

Show Suggested Answer Hide Answer
Suggested Answer: D

Enterprise Licensing Mode: In FortiSIEM enterprise licensing mode, collectors are deployed in remote sites to gather and forward data to the central FortiSIEM cluster located in the data center.

Collector Functionality: Collectors are responsible for receiving logs, events (e.g., syslog), and performance metrics from devices.

Link Down Scenario: When the link between the collector and the FortiSIEM cluster is down, the collector needs a mechanism to ensure no data is lost during the disconnection.

Event Buffering: The collector buffers the events locally until the connection is restored, ensuring that no incoming events are lost. This buffered data is then forwarded to the FortiSIEM cluster once the link is re-established.

References: FortiSIEM 6.3 User Guide, Data Collection and Buffering section, explains the behavior of collectors during network disruptions.


Contribute your Thoughts:

Lajuana
3 months ago
I wonder if the exam writers are trying to trick us with these options. Gotta stay on our toes!
upvoted 0 times
...
Renea
3 months ago
Option B sounds a bit too extreme. I can't imagine the collector would just stop processing events entirely if the link goes down.
upvoted 0 times
Kiley
2 months ago
C) The collector continues performance collection of devices, but stops receiving syslog.
upvoted 0 times
...
Aretha
3 months ago
A) The collector drops incoming events like syslog, but stops performance collection.
upvoted 0 times
...
...
Leigha
3 months ago
I'm not sure, but I think D) The collector buffers events could also be a possibility.
upvoted 0 times
...
Jillian
3 months ago
I bet the correct answer is Option A. Dropping incoming events but still doing performance collection sounds like it would maintain some functionality.
upvoted 0 times
Aliza
2 months ago
I would go with Option A as well, it seems like the most logical choice.
upvoted 0 times
...
Aliza
2 months ago
I agree, it makes sense to prioritize performance collection over incoming events.
upvoted 0 times
...
Aliza
3 months ago
I think you're right, Option A does seem like the correct answer.
upvoted 0 times
...
...
Sherron
3 months ago
I disagree, I believe the answer is C) The collector continues performance collection of devices, but stops receiving syslog.
upvoted 0 times
...
Julian
3 months ago
Hmm, I'm not sure. Option C seems a bit strange - why would it stop receiving syslog but continue performance collection?
upvoted 0 times
...
Shawna
3 months ago
Option D seems like the logical choice. The collector should buffer events until the link is restored, right?
upvoted 0 times
Torie
2 months ago
D) The collector buffers events
upvoted 0 times
...
Raina
2 months ago
B) The collector processes stop, and events are dropped.
upvoted 0 times
...
Raymon
2 months ago
A) The collector drops incoming events like syslog, but stops performance collection.
upvoted 0 times
...
Octavio
2 months ago
D) The collector buffers events
upvoted 0 times
...
Arlene
2 months ago
C) The collector continues performance collection of devices, but stops receiving syslog.
upvoted 0 times
...
Stefanie
2 months ago
B) The collector processes stop, and events are dropped.
upvoted 0 times
...
Aimee
2 months ago
C) The collector continues performance collection of devices, but stops receiving syslog.
upvoted 0 times
...
Joye
2 months ago
B) The collector processes stop, and events are dropped.
upvoted 0 times
...
Valentin
3 months ago
A) The collector drops incoming events like syslog. but stops performance collection.
upvoted 0 times
...
Pura
3 months ago
A) The collector drops incoming events like syslog. but stops performance collection.
upvoted 0 times
...
...
Audry
4 months ago
I think the answer is A) The collector drops incoming events like syslog, but stops performance collection.
upvoted 0 times
...

Save Cancel