FCSS_ADA_AR-6.7 · Question #18
What is the hourly bucket used in baselining?
The correct answer is D. To store data for specific baselines for every hour of the day during weekdays and weekends. In FortiSIEM baselining, an hourly bucket is used to maintain hourly-specific statistical baselines. This helps detect anomalies by comparing current activity against historical norms for each hour of the day, separately for weekdays and weekends. The system maintains hourly…
Question
What is the hourly bucket used in baselining?
Options
- ATo store hourly baselines reports for every hour of the day during weekdays and weekends
- BTo store data for specific baselines during the weekend, if there is a spike in network activity
- CTo store data for specific baselines during peak business hours of weekdays
- DTo store data for specific baselines for every hour of the day during weekdays and weekends
How the community answered
(24 responses)- A4% (1)
- B4% (1)
- D92% (22)
Explanation
In FortiSIEM baselining, an hourly bucket is used to maintain hourly-specific statistical baselines. This helps detect anomalies by comparing current activity against historical norms for each hour of the day, separately for weekdays and weekends. The system maintains hourly profiles, ensuring that anomalies are detected based on similar timeframes. This approach prevents false positives due to natural variations in network activity across different times of the day and different days of the week.
Topics
Community Discussion
No community discussion yet for this question.