Free Fortinet NSE 5 - FortiSIEM 6.3 Practice Questions

Refer to the exhibit.

An administrator is trying to identify an issue using an expression bated on the Expression Builder settings shown in the exhibit however, the error message shown in the exhibit indicates that the expression is invalid.

Which is the correct expression?

Which three ports can be used to send Syslogs to FortiSIEM? (Choose three.)

In the rules engine, which condition instructs FortiSIEM to summarize and count the matching evaluated data?

Which two FortiSIEM components work together to provide real-time event correlation?

Which FortiSIEM feature must you use to produce a report on which FortiGate devices in your environment are running which firmware version?