nerdexam
Fortinet

FCSS_ADA_AR-6.7 · Question #64

How often do collectors upload data to the Supervisor? (Choose two.)

The correct answer is B. Every 5 seconds for low EPS environment C. Every 10 MB for high EPS environment. Collectors use two different triggering mechanisms depending on the event rate: time-based for low EPS and size-based for high EPS. In a low EPS environment, data volume accumulates slowly, so a fixed time interval (every 5 seconds) ensures data is regularly forwarded without…

FortiSIEM Architecture and Deployment

Question

How often do collectors upload data to the Supervisor? (Choose two.)

Options

  • AEvery 20 MB for low EPS environment
  • BEvery 5 seconds for low EPS environment
  • CEvery 10 MB for high EPS environment
  • DEvery 10 seconds for high EPS environment

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    92% (23)
  • D
    4% (1)

Explanation

Collectors use two different triggering mechanisms depending on the event rate: time-based for low EPS and size-based for high EPS. In a low EPS environment, data volume accumulates slowly, so a fixed time interval (every 5 seconds) ensures data is regularly forwarded without waiting indefinitely. In a high EPS environment, events flood in so quickly that a 10 MB size threshold is hit rapidly, triggering uploads based on data volume rather than time.

Why the distractors are wrong:

  • A (20 MB, low EPS): Incorrect pairing - low EPS uses a time trigger, not a size trigger.
  • D (10 seconds, high EPS): Incorrect pairing - high EPS uses a size trigger, not a time trigger. A 10-second interval would be too slow when events are pouring in.

Memory tip: Think "slow flow = clock, fast flow = full bucket." Low EPS waits on the clock (5 seconds); high EPS waits until the bucket is full (10 MB). The pairing is always opposite in type - time for low, size for high.

Topics

#collector upload#supervisor communication#EPS environment#data transfer interval

Community Discussion

No community discussion yet for this question.

Full FCSS_ADA_AR-6.7 Practice