Exam NSE5_FSM-5.2 topic 1 question 24 discussion

Actual exam question from Fortinet's NSE5_FSM-5.2

Question #: 24
Topic #: 1

Refer to the exhibit.

The FortiSIEM administrator is examining events for two devices to investigate an issue. However, the administrator is not getting any results from their search. Based on the selected fillers shown in the exhibit, why is the search returning no results?

A. The wrong option is selected in the Operator column.
B. Parenthesis are missing.
C. An invalid IP subnet is typed in the Value column.
D. The wrong boolean operator is selected in the Next column.

Show Suggested Answer

Suggested Answer: D 🗳️

by Last00i at Jan. 31, 2023, 2:26 a.m.

Comments

Submit Cancel

myrmidon3

1 month, 2 weeks ago

Selected Answer: D

Given that a single event cannot have two Reporting IPs, using AND as the Boolean operator in the Next column would result in no matches. The correct answer is: D. The wrong Boolean operator is selected in the Next column. To properly retrieve events from either 192.168.1.1 or 172.16.10.3, the Boolean operator in the Next column should be set to OR instead of AND. Thank you for catching that!

upvoted 1 times

...

BrunoLu

1 year, 10 months ago

Selected Answer: D

D,It can't have two resporting IP,so it should be OR

upvoted 2 times

...

Last00i

1 year, 11 months ago

wrong boolean operator

upvoted 1 times

...

Exam NSE5_FSM-5.2 All Questions

View all questions & answers for the NSE5_FSM-5.2 exam

Exam NSE5_FSM-5.2 topic 1 question 24 discussion

Comments

myrmidon3

BrunoLu

Last00i

SY0-701