Online Access Free NSE7_ADA-6.3 Practice Test

In the event of a WAN link failure between the collector and the supervisor, by default, what is the maximum number of event files stored on the collector?

• A.20.000
• B.10.000
• C.30.000
• D.40.000

Refer to the exhibit.

An administrator runs an analytic search for all FortiGate SSL VPN logon failures. The results are grouped by source IP, reporting IP, and user. The administrator wants to restrict the results to only those rows where the COUNT >= 3.
Which user would meet that condition?

• A.Admin
• B.Tom
• C.Jan
• D.Sarah

Refer to the exhibit.

The exhibit shows the output of an SQL command that an administrator ran to view the natural_id value, after logging into the Postgres database.
What does the natural_id value identify?

• A.The collector
• B.An agent
• C.The supervisor
• D.The worker

Which statement about EPS bursting is true?

• A.FortiSIEM must be provisioned with ten percent the licensed EPS to handle potential event surges.
• B.FortiSIEM will let you burst up to five times the licensed EPS at any given time, regardless of unused of EPS.
• C.FortiSIEM will let you burst up to five times the licensed EPS at any given time, provided it has accumulated enough unused EPS.
• D.FortiSIEM will let you burst up to five times the licensed EPS once during a 24-hour period.

Refer to the exhibit.

Why is the windows device still in the CMDB, even though the administrator uninstalled the windows agent?

• A.The device must be deleted from backend of FortiSIEM
• B.The device has performance jobs assigned
• C.The device must be deleted manually from the CMDB
• D.The device was not uninstalled properly