FCSS_ADA_AR-6.7 · Question #2
Which statement accurately contrasts lookup tables with watchlists?
The correct answer is C. Lookup tables can contain multiple columns, whereas watchlists contain only a single column. Lookup tables and watchlists serve different purposes in Fortinet's Advanced Analytics: Lookup tables allow for structured data storage with multiple columns, making them useful for correlating different attributes or key-value pairs. Watchlists are simpler and contain only a…
Question
Which statement accurately contrasts lookup tables with watchlists?
Options
- ALookup table values age out after a period, whereas watchlist values do not have any time
- BYou can populate lookup tables through an incident, whereas you cannot populate watchlists
- CLookup tables can contain multiple columns, whereas watchlists contain only a single column.
- DYou can reference lookup table data in analytic queries and reports almost immediately, whereas
How the community answered
(21 responses)- B5% (1)
- C90% (19)
- D5% (1)
Explanation
Lookup tables and watchlists serve different purposes in Fortinet's Advanced Analytics: Lookup tables allow for structured data storage with multiple columns, making them useful for correlating different attributes or key-value pairs. Watchlists are simpler and contain only a single column, often used for quick reference to flagged values, such as IP addresses or user accounts.
Topics
Community Discussion
No community discussion yet for this question.