FCSS_ADA_AR-6.7 Exam Questions
69 real FCSS_ADA_AR-6.7 exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #51FortiSIEM Architecture and Deployment
Which three processes are collector processes? (Choose three.)
collector processesphParserphAgentManagerphMonitorAgent - Question #52Advanced FortiSIEM Analytics
Refer to the exhibit. Consider a custom lookup table MalwareIPList. An analyst constructed an analytic query to reference the MalwareIPList lookup table. What is the outcome of the...
lookup tablesLookupTableGetanalytic searchquery functions - Question #53FortiSIEM Architecture and Deployment
Which three statements about phRuleMaster are true? (Choose three.)
phRuleMasterrule processingworker nodesrule evaluation - Question #54FortiSIEM Architecture and Deployment
Refer to the exhibit. The service provider deployed FortiSIEM without a collector and added three customers on the supervisor. What mistake did the administrator make?
collector deploymentservice providerMSP architectureinfrastructure monitoring - Question #55FortiSIEM Architecture and Deployment
Where are the SQLite databases that are used for the baselining, stored?
SQLitebaseliningfile system pathsstorage location - Question #56Advanced FortiSIEM Analytics
Refer to the exhibit. If the Z-score for this rule is greater than or equal to three, what does this mean?
Z-scorestatistical analysisbaseline anomaly detectionrule conditions - Question #57SOAR Integration and Automation
Refer to the exhibit. An administrator wants to remediate the incident from FortiSIEM shown in the exhibit. What option is available to the administrator?
incident remediationFortiOSIP blockingremediation actions - Question #58FortiSIEM Architecture and Deployment
Refer to the exhibit. Is the Windows agent delivering event logs correctly?
Windows agentmonitoring templateagent statuslog collection - Question #59Advanced FortiSIEM Analytics
Refer to the exhibit. An administrator runs an analytic search for all FortiGate SSL VPN logon failures. The results are grouped by source IP, reporting IP, and user. The administr...
analytic searchCOUNT filterSSL VPN logon failuresquery results - Question #60FortiSIEM Architecture and Deployment
Which function of Linux is used by FortiSIEM for collecting logs?
Linux auditdlog collectionsystem monitoringaudit framework - Question #61FortiSIEM Architecture and Deployment
Which two things should you take into consideration before scaling collectors at a customer site? (Choose two.)
collector scalingdirect log collectionperformance monitoringSIEM collection jobs - Question #62FortiSIEM Architecture and Deployment
What is recommended method of adding workers to a FortiSIEM cluster?
FortiSIEM clusterworker nodeEPS capacitycluster scaling - Question #63FortiSIEM Architecture and Deployment
A service provider purchased a licensed EPS of 520 and the total unused events is 72,000. Calculate the total amount of allowed events for the next 3-minute interval.
EPS licensingevent calculationlicense enforcementcapacity planning - Question #64FortiSIEM Architecture and Deployment
How often do collectors upload data to the Supervisor? (Choose two.)
collector uploadsupervisor communicationEPS environmentdata transfer interval - Question #65Advanced FortiSIEM Analytics
What are the two SQLite databases that are used for baseline data? (Choose two.)
SQLite databasebaseline dataprofile databasedaily database - Question #66FortiSIEM Architecture and Deployment
What is the estimated time that it would take for the collector to reach the maximum buffer size for a 2000 EPS license?
collector bufferEPS licensebuffer capacity calculationstorage estimation - Question #67FortiSIEM Architecture and Deployment
What are two reasons that agents maintain communication with the supervisor after registration? (Choose two.)
agent communicationsupervisor registrationhealth reportingagent template - Question #68SOAR Integration and Automation
Where can you define automated remediation on FortiSIEM?
automated remediationnotification policyFortiSIEM SOARincident response - Question #69FortiSIEM Architecture and Deployment
During which time period is the license enforcement performed on the number of events received?
license enforcementEPS intervalevent licensingthree-minute window