FCSS_ADA_AR-6.7 · Question #16
For what type of data values does the rule engine query the profile database?
The correct answer is D. Statistical average and/or standard deviation values for the current hour of the day. FortiSIEM's rule engine queries the profile database to analyze historical behavior and detect anomalies. The profile database stores statistical baselines, which include: Statistical average (mean values over time) Standard deviation (variability from the mean) These values…
Question
For what type of data values does the rule engine query the profile database?
Options
- AHigh and/or low values for the current hour of the day
- BMinimum and/or maximum values for the current hour of the day
- CFirst and/or last values for the current hour of the day
- DStatistical average and/or standard deviation values for the current hour of the day
How the community answered
(48 responses)- A4% (2)
- B2% (1)
- D94% (45)
Explanation
FortiSIEM's rule engine queries the profile database to analyze historical behavior and detect anomalies. The profile database stores statistical baselines, which include: Statistical average (mean values over time) Standard deviation (variability from the mean) These values help the rule engine determine whether an observed metric (such as logins, failed attempts, network traffic, or system performance) deviates significantly from the normal pattern for the same hour of the day.
Topics
Community Discussion
No community discussion yet for this question.