Question 1

A service provider purchased a licensed EPS of 520 and the total unused events is 72,000. Calculate the total amount of allowed events for the next 3-minute interval.

Options :

A : 192,456

B : 192,442

C : 192,446

D : 192,450

Answer: A

Question 2

Refer to the exhibit.

Why was this incident auto cleared?

Options :

A :

Within five minutes, the packet loss percentage dropped to a level where the host IP of the original rule matches the host IP of the clear condition pattern

B :

Within five minutes the packet loss percentage dropped to a level where the reporting IP is the same as the host IP

C : The original rule did not trigger within five minutes

D :

Within five minutes, the packet loss percentage dropped to a level where the reporting IP is same as the source IP

Answer: A

Question 3

What happens to UEBA events when a user is off-net?

Options :

A : The agent will upload the events to the Worker if it cannot upload them to a FortiSIEM collector

B : The agent will upload the events to the Supervisor if it cannot upload them to a FortiSIEM collector

C : The agent will cache events locally if it cannot upload them to a FortiSIEM collector

D : The agent will drop the events if it cannot upload them to a FortiSIEM collector

Answer: C

Question 4

Refer to the exhibit.

Which statement about the rule filters events shown in the exhibit is true?

Options :

A :

The rule filters events with an event type that equals Domain Account Locked and a reporting IP that equals Domain Controller applications.

B :

The rule filters events with an event type that belong to the Domain Account Locked CMDB group or a reporting IP that belong to the Domain Controller applications group.

C :

The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a reporting IP that belong to the Domain Controller applications group.

D :

The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a user that belongs to the Domain Controller applications group.

Answer: C

Question 5

When automating remediation in FortiSIEM, what should be carefully considered?

Options :

A : The potential impact of the automated action on business operations?

B : The aesthetic layout of the FortiSIEM dashboard?

C : The frequency of software updates?

D : The number of users currently logged in?

Answer: A

Confidently Practice Online with Free FCSS_ADA_AR-6.7 Exam Cram

Buying Options: