Free FCSS – Advanced Analytics 6.7 Architect Exam FCSS_ADA_AR-6.7 Exam Practice Test

Which syntax will register a collector to the supervisor?

• phProvisionCollector -add
• phProvisionCollector -add
• phProvisionCollector -add
• phProvisionCollector -add

What is the disadvantage of automatic remediation?

• It can make a disruptive change to a user, block access to an application, or disconnect critical systems from the network.
• External threats or attacks detected by FortiSIEM will need user interaction to take action on an already overworked SOC team.
• It is equivalent to running an IPS in monitor-only mode-watches but does not block.
• Threat behavior occurring during the night could take hours to respond to.

How do customers connect to a shared multi-tenant instance on FortiSOAR?

• The customer must install a tenant node to connect to the MSSP shared multi-tenant instance.
• The MSSP must provide secure network connectivity between the FortiSOAR manager node and the customer devices.
• The MSSP must install a Secure Message Exchange node to connect to the customer’s shared multi-tenant instance.
• The MSSP must install an agent node on the customer’s network to connect to the customer's shared multi-tenant instance.

Which organization do agents belong to after registration? (Choose two.)

• The windows agents belong to the super organization.
• The agents belong to the organization specified in the agent installation setup wizard for Windows platforms.
• The Linux agents belong to the super local organization.
• The agents belong to the organization specified in the command line parameters for Linux platforms.

What is the hourly bucket used in baselining?

• To store hourly baselines reports for every hour of the day during weekdays and weekends
• To store data for specific baselines during the weekend, if there is a spike in network activity
• To store data for specific baselines during peak business hours of weekdays
• To store data for specific baselines for every hour of the day during weekdays and weekends

Which lookup table function can be either true or false?

• LookupTableHas
• LookupTableGet
• LookupTableFilter
• LookupTableRetriev

Which statement about EPS bursting is true?

• FortiSIEM will let you burst up to five times the licensed EPS at any given time, provided it has accumulated enough unused EPS.
• FortiSIEM will let you burst up to five times the licensed EPS once during a 24-hour period.
• FortiSIEM will let you burst up to five times the licensed EPS at any given time, regardless of unused of EPS.
• FortiSIEM must be provisioned with ten percent the licensed EPS to handle potential event surges.

What are two functions of numpoints in a rule and profile database? (Choose two.)

• To prevent premature triggering of a rule before a baseline is set and becomes active
• To ensure that the data points do not exceed a threshold value
• To fetch only values from the profile database that have numPoints greater than a certain threshold
• To track the hour of the day for each data value

In a customer network that includes a collector, which device performs device discoveries?

• Agent
• Supervisor
• Worker
• Collector

How can you customize the AI model on FortiSIEM?

• Retrain the AI model
• Reconfigure UEBA rules
• Adjust risk weighting for UEBA tags
• Adjust number of samples collected by the UEBA agents