View all questions & answers for the NSE 5 - FortiSIEM 6.3 Exam Materials exam


Question 23 Discussion

Refer to the exhibit. A FortiSIEM administrator wants to group some attributes for a report but is not able to do so successfully. As shown in the exhibit, why are some of the fields highlighted in red? (Choose one answer)

  • A. Unique attribute cannot be grouped.
  • B. The attribute COUNT(Matched events) is an invalid expression.
  • C. The Event Receive Log Time attribute is not available for logs
  • D. No RAW Event Log attribute is available for devices
Correct Answer: A

Brave-Dump Clients Votes

A 100%

Comments



Matias Ramallo 2025-04-05 08:44:55

Selected Answers: A


A confirmed as per study guide page 243