Question 1

For effective rule construction in FortiSIEM, it's essential to consider:

Options :

A : The expected behavior of users in the network?

B : The specific brands of devices in the environment?

C : Known patterns of malicious activities?

D : The latest threats detailed in the MITRE ATT&CK® framework?

Answer: A,C,D

Question 2

Refer to the exhibit.

This is an example of a baseline profile that is configured in the backend of FortiSIEM. Which two Group By attributes are configured for this profile? (Choose two.)

Options :

A : Logon Failure

B : Reporting Device

C : Reporting IP

D : Distinct User

Answer: B,C

Question 3

Refer to the exhibit.

Why was this incident auto cleared?

Options :

A :

Within five minutes, the packet loss percentage dropped to a level where the host IP of the original rule matches the host IP of the clear condition pattern

B :

Within five minutes the packet loss percentage dropped to a level where the reporting IP is the same as the host IP

C : The original rule did not trigger within five minutes

D :

Within five minutes, the packet loss percentage dropped to a level where the reporting IP is same as the source IP

Answer: A

Question 4

What are two reasons that agents maintain communication with the supervisor after registration? (Choose two.)

Options :

A : To collect new agent template

B : To report health and its status

C : To report incoming EPS value

D : To report logs and events

Answer: A,B

Question 5

When automating remediation in FortiSIEM, what should be carefully considered?

Options :

A : The potential impact of the automated action on business operations?

B : The aesthetic layout of the FortiSIEM dashboard?

C : The frequency of software updates?

D : The number of users currently logged in?

Answer: A

Free FCSS_ADA_AR-6.7 Mock Exam – Practice Online Confidently

Buying Options: