Priya Dogra – Certification | Jobs | Internships
Related Articles
SIEM quiz answers
These are the answers to the SIEM lesson quiz in Fortinet’s free Getting Started in Cybersecurity course, with a short explanation for every question. Getting Started in Cybersecurity is one of the two course options (with Technical Introduction to Cybersecurity) that, together with Introduction to the Threat Landscape, earns the Fortinet Certified Fundamentals (FCF) in Cybersecurity certification.
Course at a glance
- Provider: Fortinet Training Institute
- Cost: Free
- Course: Getting Started in Cybersecurity (15 short lessons, each with a quiz)
- Best for: Sales and non-technical roles that need a high-level view of security technology
- Counts toward: FCF in Cybersecurity (valid 2 years)
- Official course: training.fortinet.com
- Answers reviewed: November 2026
Fortinet updates its question banks from time to time. If you see a question that isn’t listed here, leave a comment with the question and we’ll add it.
Quiz questions and answers
Question 1: Which two requirements were the motivation for SIEM? (Choose two.)
- Complying to regulations
- Increasing number of alerts
- Remaining competitive
- Exploiting Big Data
Why: SIEM was driven by regulatory compliance and the growing flood of security alerts.
Question 2: What was the impetus for more automation and machine learning in later SIEM devices?
- Shortage of trained personnel
- Requirement to manage Big Data
- Need to improve MIS efficiency
- Demand to reduce MIS costs
Why: A shortage of trained security staff pushed SIEM vendors toward automation and machine learning.
Question 3: What was the primary driver for purchasing SIEM?
- Improve MIS efficiency
- Compensate for the skills-gap labor shortage
- Collect information about customers
- Comply with regulations
Why: Compliance with regulations was the main reason organisations bought SIEM.
Question 4: Which feature provides SIEM greater visibility into the entire network?
- Sharing of logs by IoTs and BYODs
- Deciphering encrypted logs and alerts
- Complying with regulations
- Analyzing logs and alerts from a single-pane-of-glass
Why: Viewing logs and alerts from the whole network in one place gives SIEM its visibility.
Question 5: Which problem was a barrier to the general acceptance of first-generation SIEM?
- Cost to purchase was prohibitive
- High-level of skill was required
- Did not have the features needed by organizations
- The point solution approach to network security
Why: First-generation SIEMs needed highly skilled staff to run, which slowed adoption.
Question 6: Which feature is a characteristic of later SIEMs?
- Automatic backups and integrity checking
- Collect, normalize, and store log events and alerts
- Deciphering encrypted data flows
- User and entity behavior analytics (UEBA)
Why: Later SIEMs added user and entity behaviour analytics (UEBA) to spot unusual activity.
Question 7: Which three compliance regulations are legislative and industry-sponsored? (Choose three.)
- Payment Card Industry (PCI) standard
- General Data Protection Regulation (GDPR)
- Health Portability Insurance and Accountability Act (HPIAA)
- Health Insurance Portability and Accountability Act (HIPAA)
- Payment Industry Card (PIC) standard
Why: PCI DSS, GDPR and HIPAA are the real regulations; the other two options are misspelled decoys.
Question 8: What is one method that SIEM uses to analyze data?
- Decipher encrypted logs and alerts
- Apply security controls
- Watch for known indicators of compromise (IoC)
- Decipher encrypted data flows
Why: SIEM looks for known indicators of compromise (IoCs) in the data it collects.
Question 9: What does SIEM do primarily?
- Collect, normalize, and store log events and alerts
- Connect all security tools together into defined workflows
- Manage network information and alerts
- Manage network events and alerts
Why: At its core, SIEM collects, normalises and stores log events and alerts.
Question 10: Which compliance, if ignored by businesses, hospitals, and other organizations, can result in punitive fines?
- Complying to machine learning checks
- Complying to automatic backups and integrity checks
- Complying to User and entity behavior analytics (UEBA)
- Complying to regulations
Why: Ignoring regulatory compliance can lead to heavy fines.
Questions from the older NSE 2 version of this lesson
Fortinet’s earlier NSE 2 course asked these questions on the same topic. They are kept here in case your quiz still shows them.
Question 1: How did SIEM evolve?
- As an information platform only
- From an information platform to a threat intelligence center
- From an information platform to a fully integrated and automated center for security and network operations
- As a threat intelligence center only
Why: SIEM grew from a log information platform into an integrated, automated center for security and network operations.
Question 2: Which three regulatory standards and acts must businesses, hospitals, and other organizations comply with? (Choose three.)
- HIPAA
- PCI
- SPML
- XSLT
- GDPR
Why: HIPAA, PCI DSS and GDPR are regulations organisations must comply with; SPML and XSLT are technical standards, not regulations.
Question 3: Which three problems does SIEM solve? (Choose three.)
- The complexity of technology and the difficulty with identifying attacks
- The lack of implementation of authentication methods
- The lack of security awareness by employees
- The long delay in discovering security breaches by security teams
- More sophisticated and stealthy cyber attacks
Why: SIEM helps with complex environments, slow breach discovery and stealthier attacks.
Question 4: Which two requirements led to the development of SIEM? (Choose two.)
- To perform vulnerability scanning
- To measure and prove compliance to various legislations
- To contend with the flood of alerts issued from IPSs and IDSs
- To simulate phishing attacks
Why: SIEM was developed to prove compliance and to handle the flood of IPS and IDS alerts.
Question 5: What does the term SIEM stand for?
- Security Information and Email Management
- Security Information and Electronic Messaging
- Security Information and Emergency Management
- Security Information and Event Manager
Why: SIEM stands for Security Information and Event Management (the course words it “Manager”).
Question 6: Which three tasks must technology perform to satisfy network security compliance requirements? (Choose three.)
- Monitor, correlate, and notify events in real-time
- Aggregate logs from many network sources
- Prevent employees from accessing the internet
- Store log data for a length of time that satisfies auditing requirements
- Allow public access to aggregated logs
Why: Compliance requires aggregating logs, correlating and alerting on events in real time, and keeping logs long enough for audits.
All Getting Started in Cybersecurity quiz answers
- Endpoint Monitoring quiz answers
- Firewalls quiz answers
- Zero Trust Network Access (ZTNA) quiz answers
- Endpoint Hardening Techniques quiz answers
- Content Filters quiz answers
- SIEM (this page)
- SOAR quiz answers
- Sandbox quiz answers
- Web Application Firewall (WAF) quiz answers
- SASE quiz answers
- Secure Email Gateway quiz answers
- Network Access Control (NAC) quiz answers
- Cloud Service Models quiz answers
- Wi-Fi quiz answers
- SD-WAN quiz answers
Frequently asked questions
Is Getting Started in Cybersecurity free?
Yes. It is free on the Fortinet Training Institute website; you only need a free account.
What is the difference between Getting Started and Technical Introduction to Cybersecurity?
Getting Started in Cybersecurity is a high-level course for sales and non-technical roles. Technical Introduction to Cybersecurity goes deeper and suits people heading into technical IT or security jobs. Either one, plus Introduction to the Threat Landscape, earns the FCF certification.
Did the old Fortinet NSE 2 course change?
Yes. Fortinet replaced the NSE 1–3 courses with the FCF curriculum. Many NSE 2 lesson topics now appear in Getting Started in Cybersecurity, which is why this page includes both the current and the older questions.
One comment
Pingback: Fortinet Secure Email Gateway Quiz Answers Explained | Priya Dogra