NSE 5 – FortiSIEM 5.2 — Question 24

A FortiSIEM administrator wants to restrict a network administrator to running searches for only firewall devices.
Under role management, which option does the FortiSIEM administrator need to configure to achieve this scenario?

Answer options

• A. CMBD Reports Conditions
• B. Data Conditions
• C. UI Access

Correct answer: B

Explanation

The correct answer is B, as 'Data Conditions' allow the administrator to specify which data sources users can access. Options A and C do not provide the necessary restrictions for limiting search capabilities to specific device types.