Fortinet Exam NSE5_FSM-6.3 Topic 3 Question 24 Discussion

Actual exam question for Fortinet's NSE5_FSM-6.3 exam

Question #: 24
Topic #: 3

[All NSE5_FSM-6.3 Questions]

If FortiSIEM supervisor is deployed with the worker using the proprietary flat file database, which action is required?

AAn event database must be placed on NFS

BCollectors must be deployed

CA FortiSIEM service provider license must be obtained

DA separate network interface must be used for the storage network

Show Suggested Answer

Suggested Answer: C, D, E

Syslog Ports: Syslog messages can be sent over different ports using TCP or UDP protocols.

Common Ports for Syslog:

UDP 514: This is the default port for sending syslog messages over UDP.

TCP 514: This is the default port for sending syslog messages over TCP, providing a more reliable transmission.

TCP 1470: This port is often used for secure or alternative syslog transmission.

Usage in FortiSIEM: FortiSIEM can be configured to receive syslog messages on these ports to ensure the logs are collected from various network devices.

Reference: FortiSIEM 6.3 User Guide, Syslog Integration section, which details the supported ports for syslog transmission.

by Eura at Apr 08, 2025, 12:21 PM

Limited Time Offer

25%

Off

Get Premium NSE5_FSM-6.3 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wayne

1 days ago

I'm pretty sure the answer is D. A separate network interface must be used for the storage network. That's how you isolate the storage traffic from the main network traffic.

upvoted 0 times

...