NSE 5 – FortiSIEM 5.2 — Question 8

Which two FortiSIEM components work together to provide real-time event correlation?

Answer options

• A. Collector and Windows agent
• B. Supervisor and worker
• C. Worker and collector
• D. Supervisor and collector

Correct answer: D

Explanation

The Supervisor manages the overall event correlation process, while the Collector gathers data from various sources. Together, they facilitate real-time analysis, making option D the correct answer. The other options involve components that do not directly collaborate for real-time event correlation.