ExamGecko
Login
Home / Fortinet / FCSS_ADA_AR-6.7 / List of questions
Ask Question

Fortinet FCSS_ADA_AR-6.7 Practice Test - Questions Answers, Page 4

Add to Whishlist

List of questions

Question 31

Report Export Collapse

In a customer network that includes a collector, which device performs device discoveries?

Become a Premium Member for full access
  Unlock Premium Member

Question 32

Report Export Collapse

Refer to the exhibit.

Fortinet FCSS_ADA_AR-6.7 image Question 32 63883969962145066283749

Why is the windows device still in the CMDB, even though the administrator uninstalled the windows agent?

Become a Premium Member for full access
  Unlock Premium Member

Question 33

Report Export Collapse

Refer to the exhibit.

Fortinet FCSS_ADA_AR-6.7 image Question 33 63883969962176315155511

An administrator deploys a new collector for the first time, and notices that all the processes expect the phMonitor are down.

How can the administrator bring the processes up?

Become a Premium Member for full access
  Unlock Premium Member

Question 34

Report Export Collapse

Which syntax will register a collector to the supervisor?

Become a Premium Member for full access
  Unlock Premium Member

Question 35

Report Export Collapse

How can you invoke an integration policy on FortiSIEM rules?

Become a Premium Member for full access
  Unlock Premium Member

Question 36

Report Export Collapse

Why can collectors not be defined before the worker upload address is set on the supervisor?

Become a Premium Member for full access
  Unlock Premium Member

Question 37

Report Export Collapse

Refer to the exhibit.

Fortinet FCSS_ADA_AR-6.7 image Question 37 63883969962238813494547

The profile database contains CPU utilization values from day one. At midnight on the second day, the CPU utilization values from the daily database will be merged with the profile database.

In the profile database, in the Hour of Day column where 9 is the value, what will be the updated minimum, maximum, and average CPU utilization values?

Become a Premium Member for full access
  Unlock Premium Member

Question 38

Report Export Collapse

Which lookup table function can be either true or false?

Become a Premium Member for full access
  Unlock Premium Member

Question 39

Report Export Collapse

Refer to the exhibit.

Fortinet FCSS_ADA_AR-6.7 image Question 39 63883969962301311985827

The window for this rule is 30minutes.

What is this rule tracking?

Become a Premium Member for full access
  Unlock Premium Member

Question 40

Report Export Collapse

Refer to the exhibit.

Fortinet FCSS_ADA_AR-6.7 image Question 40 63883969962426308616144

The rule evaluates multiple VPN logon failures within a ten-minute window. Consider the following VPN failure events received within a ten-minute window:

Fortinet FCSS_ADA_AR-6.7 image Question 40 63883969962426308616144

How many incidents are generated?

Become a Premium Member for full access
  Unlock Premium Member
Total 59 questions
Go to page: of 6
Open VPLUS File
Convert VPLUS to PDF

Related questions

Refer to the exhibit. An administrator runs an analytic search for all FortiGate SSL VPN logon failures. The results are grouped by source IP, reporting IP, and user. The administrator wants to restrict the results to only those rows where the COUNT >=3. Which user would meet that condition?
Refer to the exhibit. Is the Windows agent delivering event logs correctly?
Refer to the exhibit. An administrator wants to remediate the incident from FortiSIEM shown in the exhibit. What option is available to the administrator?
Refer to the exhibit. If the Z-score for this rule is greater than or equal to three, what does this mean?
Where are the SQLite databases that are used for the baselining, stored?
Refer to the exhibit. The service provider deployed FortiSIEM without a collector and added three customers on the supervisor. What mistake did the administrator make?
Which three statements about phRuleMaster are true? (Choose three.)
Refer to the exhibit. Consider a custom lookup table MalwareIPList. An analyst constructed an analytic query to reference the MalwareIPList lookup table. What is the outcome of the analytic query?
Which three processes are collector processes? (Choose three.)
Refer to the exhibit. Consider a nested event query where both inner and outer queries are event queries. Reporting IP is selected from the CMDB group Network Device, Event Type is selected from the CMDB group Logon Success, and Source IP is selected from the report Failed Logons to Network Devices. An administrator is about to execute the nested query. The report time ranges must be set before execution. The Nested Time Range will be applied to which attributes?