Perform Configuration Management Database (CMDB) and Lookup Table Queries NSE6-FORTISIEM-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a FortiSIEM lookup table query, how can you present only specific columns in the output?

   • AList the desired columns in the SELECT clause
   • BUse the WHERE clause to filter columns
   • CUse the GROUP BY clause to group columns
   • DUse the ORDER BY clause to sort columns
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of querying a lookup table in FortiSIEM?

   • ATo retrieve data from custom lookup tables for analysis or enrichment
   • BTo configure event collection rules
   • CTo retrieve device information from the CMDB
   • DTo manage user permissions
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A large enterprise has a CMDB with thousands of devices. An analyst needs to identify all devices that are both routers and have a vendor of 'Palo Alto' or 'Fortinet', but only those located in the Singapore data center. The analyst wants to minimize the number of queries and ensure the result is accurate. What is the best approach?

   • ARun two separate queries—one for Palo Alto routers in Singapore and one for Fortinet routers in Singapore—then combine the results.
   • BRun a single CMDB query with filters for device type = 'router', location = 'Singapore', and vendor in ('Palo Alto', 'Fortinet').
   • CRun a query for all routers in Singapore, then manually filter the results by vendor.
   • DRun a query for all devices with vendor 'Palo Alto' or 'Fortinet', then filter by device type and location in a spreadsheet.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the benefit of joining a lookup table with another data source in FortiSIEM?

   • AIt reduces the amount of data stored in the system
   • BIt speeds up the query execution time
   • CIt automatically creates new lookup tables
   • DIt enriches query results with additional context from the lookup table
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In FortiSIEM, what is a lookup table?

   • AA table that stores user credentials
   • BA custom table created by an administrator to store reference data
   • CA table that stores raw event logs
   • DA system table that stores device configuration information
   Reveal Solution Discussion Select an answer first