FCSS_ADA_AR-6.7 · Question #45
From where does the rule engine load the baseline data values?
The correct answer is C. The profile database. The rule engine in FortiSIEM loads baseline data values from the profile database. This database stores historical trends and behavioral baselines for various metrics, such as CPU usage, network activity, and authentication patterns. Profile database maintains long-term…
Question
From where does the rule engine load the baseline data values?
Options
- AThe memory
- BThe profile report
- CThe profile database
- DThe daily database
How the community answered
(55 responses)- A7% (4)
- B4% (2)
- C87% (48)
- D2% (1)
Explanation
The rule engine in FortiSIEM loads baseline data values from the profile database. This database stores historical trends and behavioral baselines for various metrics, such as CPU usage, network activity, and authentication patterns. Profile database maintains long-term aggregated statistics for anomaly detection. Baseline values are used to compare current events against expected behavior. This helps in detecting deviations, such as a sudden increase in failed logins or unusual traffic spikes.
Topics
Community Discussion
No community discussion yet for this question.