Câu 11: NSE5_FSM-5.2: NSE 5 - FortiSIEM 5.2

Refer to the exhibit. A FortiSIEM administrator wants to group some attributes for a report, but is not able to do so successfully. As shown in the exhibit, why are some of the fields highlighted in red?

1. A. The Event Receive Time attribute is not available for logs.
2. B. The attribute COUNT (Matched event) is an invalid expression.
3. C. Unique attributes cannot be grouped. — đáp án hiện tại
4. D. No RAW Event Log attribute is available for devices.