Fortinet Exam NSE5_FSM-5.2 Topic 1 Question 9 Discussion

Actual exam question for Fortinet's NSE5_FSM-5.2 exam

Question #: 9
Topic #: 1

Refer to the exhibit.

A FortiSlEM administrator wants to group some attributes for a report, but is not able to do so successfully.

As shown in the exhibit, why are some of the fields highlighted in red?

AThe Event Receive Time attribute is not available for logs.

BThe attribute COUNT(Matched event) is an invalid expression.

CUnique attributes cannot be grouped.

DNo RAW Event Log attribute is available for devices.

Show Suggested Answer

Suggested Answer: C

by Alex at May 04, 2022, 11:11 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!