StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Logging and diagnosis

Practice question 37 of 440 · hard

Which three fields or field groups help correlate a traffic log with a security-profile event for the same connection? Select three answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Session ID when available
  2. B.Device/VDOM and timestamp
  3. C.Client/destination addresses and policy ID
  4. D.Only the log's severity number
  5. E.Only the administrator profile name
Show the answer and explanation

✓ Correct answers

  • Session ID when available
  • Device/VDOM and timestamp
  • Client/destination addresses and policy ID

Connection and context identifiers support correlation. Severity measures importance and is not unique to a connection; administrator privileges do not identify a client security event.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.