NSE7_ADA-6.3 試験問題を無料オンラインアクセス

Why can collectors not be defined before the worker upload address is set on the supervisor?

• A.Collectors receive the worker upload address during the registration process
• B.Collectors can only upload data to a worker, and the supervisor is not a worker
• C.To ensure that the service provider has deployed at least one worker along with a supervisor
• D.To ensure that the service provider has deployed a NFS server

Refer to the exhibit.

An administrator deploys a new collector for the first time, and notices that all the processes except the phMonitor are down.
How can the administrator bring the processes up?

• A.The administrator needs to run the command phtools --start all on the collector.
• B.The collector was not deployed properly and must be redeployed.
• C.Rebooting the collector will bring up the processes.
• D.The processes will come up after the collector is registered to the supervisor.

What happens to UEBA events when a user is off-net?

• A.The agent will drop the events if it cannot upload them to a FortiSIEM collector
• B.The agent will cache events locally if it cannot upload them to a FortiSIEM collector
• C.The agent will upload the events to the Supervisor if it cannot upload them to a FortiSIEM collector
• D.The agent will upload the events to the Worker if it cannot upload them to a FortiSIEM collector

Refer to the exhibit.

The rule evaluates multiple VPN logon failures within a ten-minute window. Consider the following VPN failure events received within a ten-minute window:

How many incidents are generated?

• A.0
• B.3
• C.2
• D.1

What are the modes of Data Ingestion on FortiSOAR? (Choose three.)

• A.App Push
• B.Schedule based
• C.Notification based
• D.Policy based
• E.Rule based