Question 1

A service provider purchased a licensed EPS of 520 and the total unused events is 72,000. Calculate the total amount of allowed events for the next 3-minute interval.

Options :

A : 192,456

B : 192,442

C : 192,446

D : 192,450

Answer: A

Question 2

For effective rule construction in FortiSIEM, it's essential to consider:

Options :

A : The expected behavior of users in the network?

B : The specific brands of devices in the environment?

C : Known patterns of malicious activities?

D : The latest threats detailed in the MITRE ATT&CK® framework?

Answer: A,C,D

Question 3

Which organization do agents belong to after registration? (Choose two.)

Options :

A : The windows agents belong to the super organization.

B :

The agents belong to the organization specified in the agent installation setup wizard for Windows platforms.

C : The Linux agents belong to the super local organization.

D :

The agents belong to the organization specified in the command line parameters for Linux platforms.

Answer: D

Question 4

Refer to the exhibit.

Why was this incident auto cleared?

Options :

A :

Within five minutes, the packet loss percentage dropped to a level where the host IP of the original rule matches the host IP of the clear condition pattern

B :

Within five minutes the packet loss percentage dropped to a level where the reporting IP is the same as the host IP

C : The original rule did not trigger within five minutes

D :

Within five minutes, the packet loss percentage dropped to a level where the reporting IP is same as the source IP

Answer: A

Question 5

Refer to the exhibit.

This is an example of a baseline profile that is configured in the backend of FortiSIEM. Which two Group By attributes are configured for this profile? (Choose two.)

Options :

A : Logon Failure

B : Reporting Device

C : Reporting IP

D : Distinct User

Answer: B,C

Free FCSS_ADA_AR-6.7 Mock Exam – Practice Online Confidently

Buying Options: