FCSS_ADA_AR-6.7 by Fortinet Actual Free Exam Questions And Answers

Question 1

Refer to the exhibit.

Why is the windows device still in the CMDB, even though the administrator uninstalled the windows agent?

A. The device was not installed properly

B. The device must be deleted from backend of FortiSIEM

C. The device has performance jobs assigned

D. The device must be deleted manually from the CMDB

Discussion 0

Correct Answer: B Vote an answer

Question 2

FortiSIEM provides all rules with the ability to automatically change an active incident status to auto-cleared, based on an extra set of defined criteria.
Why would you configure FortiSIEM to automatically change an active incident status to auto-cleared?

A. Because some security-related incidents occur on a temporary basis.

B. Because you need a way to reduce a backlog of incident responses.

C. Because too many active incidents can spike the resource usaqe on FortiSIEM.

D. Because availability or performance-related problems may trigger a threshold temporarily.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

Which lookup table function can be either true or false?

A. LookupTableGet

B. LookupTableFilter

C. LookupTableRetriev

D. LookupTableHas

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

Which syntax will register a collector to the supervisor?

A. phProvisionCollector -add <user><password><collector IP><organization><superName>

B. phProvisionCollector -add <user><password><super IP><organization><workerName>

C. phProvisionCollector -add <user><password><super ID><organization><collectorName>

D. phProvisionCollector -add <user><password><collector IP><organizationid><collectorName>

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

How do customers connect to a shared multi-tenant instance on FortiSOAR?

A. The customer must install a tenant node to connect to the MSSP shared multi-tenant instance.

B. The MSSP must install an agent node on the customer's network to connect to the customer's shared multi-tenant instance.

C. The MSSP must provide secure network connectivity between the FortiSOAR manager node and the customer devices.

D. The MSSP must install a Secure Message Exchange node to connect to the customer's shared multi-tenant instance.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

In a customer network that includes a collector, which device performs device discoveries?

A. Agent

B. Worker

C. Collector

D. Supervisor

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

Which three statements about phRuleMaster are true? (Choose three.)

A. phRuleMaster queues up the data being received from the phRuleWorkers into buckets.

B. phRuleMaster is present on the supervisor only.

C. phRuleMaster is present on the supervisor and workers.

D. phRuleMaster wakes up to evaluate all the rule data in parallel, every 30 seconds.

E. phRuleMaster wakes up to evaluate all the rule data in series, every 30 seconds.

Discussion 0

Correct Answer: A,C,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Fortinet FCSS—Advanced Analytics 6.7 Architect - FCSS_ADA_AR-6.7 Exam Practice Test

Contact Us

Useful Links

Latest Updated