FCSS—Advanced Analytics 6.7 Architect - FCSS_ADA

Question 1

Refer to the exhibit.

The exhibit shows the output of an SQL command that an administrator ran to view the natural_id value, after logging into the Postgres database.
What does the natural_id value identify?

A. The worker

B. The supervisor

C. The collector

D. An agent

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit.

Which devices will be added to the CMDB and mapped to Customer E?

A. 10.50.0.1

B. 10.50.0.149

C. 10.50.0.150

D. 10.60.0.1

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

From where does the rule engine load the baseline data values?

A. The profile database

B. The profile report

C. The memory

D. The daily database

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Which statement about EPS bursting is true?

A. FortiSIEM will let you burst up to five times the licensed EPS at any given time, regardless of unused of EPS.

B. FortiSIEM must be provisioned with ten percent the licensed EPS to handle potential event surges.

C. FortiSIEM will let you burst up to five times the licensed EPS once during a 24-hour period.

D. FortiSIEM will let you burst up to five times the licensed EPS at any given time, provided it has accumulated enough unused EPS.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit.

How long has the UEBA agent been operationally down?

A. 20 Hours

B. 9 Hours

C. 2 Hours

D. 21 Hours

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit.

The window for this rule is 30 minutes.
What is this rule tracking?

A. A sudden 1.50 times increase in WMI response times over a 30-minute time window

B. A sudden 75% increase in WMI response times over a 30-minute time window

C. A sudden 150% increase in WMI response times over a 30-minute time window

D. A sudden 50% increase in WMI response times over a 30-minute time window

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

Consider the five account locked events received by FortiSIEM from domain controllers within the last 10 minutes (ten minutes is the evaluation window for the subpattern DomainAcctLockout):

If you look for one or more matching events and groupings by the same reporting IP address, reporting device, and user, how many incidents are created?

A. 2

B. 1

C. 3

D. 4

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Fortinet FCSS—Advanced Analytics 6.7 Architect - FCSS_ADA_AR-6.7 Exam Practice Test

Latest Update

Useful Links

Contact Us