FCSS_ADA_AR-6.7 試験問題を無料オンラインアクセス

How can you invoke an integration policy on FortiSIEM rules?

• A.Through External Authentication settings
• B.Through Notification Policy settings
• C.Through Incident Notification settings
• D.Through remediation scripts

From where does the rule engine load the baseline data values?

• A.The memory
• B.The daily database
• C.The profile database
• D.The profile report

Refer to the exhibit.

This is an example of a baseline profile that is configured in the backend of FortiSIEM.
Which two Group By attributes are configured for this profile? (Choose two.)

• A.Distinct User
• B.Reporting IP
• C.Reporting Device
• D.Logon Failure

Why can collectors not be defined before the worker upload address is set on the supervisor?

• A.Collectors can only upload data to a worker, and the supervisor is not a worker
• B.To ensure that the service provider has deployed a NFS server
• C.Collectors receive the worker upload address during the registration process
• D.To ensure that the service provider has deployed at least one worker along with a supervisor

Refer to the exhibit.

Why was this incident auto cleared?

• A.Within five minutes, the packet loss percentage dropped to a level where the host IP of the original rule matches the host IP of the clear condition pattern
• B.Within five minutes, the packet loss percentage dropped to a level where the reporting IP is same as the source IP
• C.The original rule did not trigger within five minutes
• D.Within five minutes the packet loss percentage dropped to a level where the reporting IP is the same as the host IP