Free Fortinet FCSS_ADA_AR-6.7 Exam Questions

Question 1

Refer to the exhibit.Why was this incident auto cleared?

A : Within five minutes, the packet loss percentage dropped to a level where the host IP of the original rule matches the host IP of the clear condition pattern

B : Within five minutes the packet loss percentage dropped to a level where the reporting IP is the same as the host IP

C : The original rule did not trigger within five minutes

D : Within five minutes, the packet loss percentage dropped to a level where the reporting IP is same as the source IP

Answer: A

Question 2

Refer to the exhibit.Consider a nested event query where both inner and outer queries are event queries. Reporting IP is selected from the CMDB group Network Device, Event Type is selected from the CMDB group Logon Success, and Source IP is selected from the report Failed Logons to Network Devices. An administrator is about to execute the nested query. The report time ranges must be set before execution. The Nested Time Range will be applied to which attributes?

A : The nested time range will be configured for the Reporting IP attribute.

B : The nested time range will be configured for the Reporting IP and Event Type attributes.

C : The nested time range will be configured for the Source IP attribute.

D : The nested time range will be configured for the Event Type attribute.

Answer: C

Question 3

When automating remediation in FortiSIEM, what should be carefully considered?

A : The potential impact of the automated action on business operations?

B : The aesthetic layout of the FortiSIEM dashboard?

C : The frequency of software updates?

D : The number of users currently logged in?

Answer: A

Question 4

Refer to the exhibit.Consider a nested event query where both inner and outer queries are event queries. Reporting IP is selected from the CMDB group Network Device, Event Type is selected from the CMDB group Logon Success, and Source IP is selected from the report Failed Logons to Network Devices. An administrator is about to execute the nested query. The report time ranges must be set before execution. The Nested Time Range will be applied to which attributes?

A : The nested time range will be configured for the Reporting IP attribute.

B : The nested time range will be configured for the Reporting IP and Event Type attributes.

C : The nested time range will be configured for the Source IP attribute.

D : The nested time range will be configured for the Event Type attribute.

Answer: C

Question 5

Which organization do agents belong to after registration? (Choose two.)

A : The windows agents belong to the super organization.

B : The agents belong to the organization specified in the agent installation setup wizard for Windows platforms.

C : The Linux agents belong to the super local organization.

D : The agents belong to the organization specified in the command line parameters for Linux platforms.

Answer: D