Online Access Free FCSS_ADA_AR-6.7 Practice Test

Where are the SQLite databases that are used for the baselining, stored?

• A./opt/phoenix/config
• B./opt/phoenix/bin
• C./opt/phoenix/delta
• D./opt/phoenix/cache

Refer to the exhibit.

The service provider deployed FortiSIEM without a collector and added three customers on the supervisor.
What mistake did the administrator make?

• A.Collectors must be deployed on all customer premises before they are added to organization on the supervisor.
• B.The number of workers on the FortiSIEM cluster must match the number of customers added
• C.Customer A and customer B have overlapping IP addresses.
• D.At least one collector must be deployed to collect logs from service provider infrastructure devices.

Refer to the exhibit.

This is an example of a baseline profile that is configured in the backend of FortiSIEM.
Which two Group By attributes are configured for this profile? (Choose two.)

• A.Logon Failure
• B.Reporting IP
• C.Reporting Device
• D.Distinct User

FortiSIEM provides all rules with the ability to automatically change an active incident status to auto-cleared, based on an extra set of defined criteria.
Why would you configure FortiSIEM to automatically change an active incident status to auto-cleared?

• A.Because too many active incidents can spike the resource usaqe on FortiSIEM.
• B.Because availability or performance-related problems may trigger a threshold temporarily.
• C.Because some security-related incidents occur on a temporary basis.
• D.Because you need a way to reduce a backlog of incident responses.

Refer to the exhibit.

The collector is registered and has pulled the license file from the supervisor.
What are the consequences of removing the license file?

• A.The collector processes will go down.
• B.The collector must be re-registered with the supervisor to get the license file back.
• C.The collector must be redeployed to get the license file back.
• D.The license file must be pushed manually from the supervisor.