Online Access Free NSE7_ADA-6.3 Practice Test

What are the modes of Data Ingestion on FortiSOAR? (Choose three.)

• A.App Push
• B.Notification based
• C.Schedule based
• D.Rule based
• E.Policy based

On which disk are the SQLite databases that are used for the baselining stored?

• A.Disk4
• B.Disk2
• C.Disk3
• D.Disk1

Refer to the exhibit.

Which statement about the rule filters events shown in the exhibit is true?

• A.The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a user that belongs to the Domain Controller applications group.
• B.The rule filters events with an event type that equals Domain Account Locked and a reporting IP that equals Domain Controller applications.
• C.The rule filters events with an event type that belong to the Domain Account Locked CMDB group or a reporting IP that belong to the Domain Controller applications group.
• D.The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a reporting |P that belong to the Domain Controller applications group.

Refer to the exhibit.

An administrator deploys a new collector for the first time, and notices that all the processes except the phMonitor are down.
How can the administrator bring the processes up?

• A.The administrator needs to run the command phtools --start all on the collector.
• B.Rebooting the collector will bring up the processes.
• C.The collector was not deployed properly and must be redeployed.
• D.The processes will come up after the collector is registered to the supervisor.

Which two statements about the maximum device limit on FortiSIEM are true? (Choose two.)

• A.The device limit is defined for the whole system and is shared by every customer on a service provider edition.
• B.The device limit is defined per customer and every customer is assigned a fixed number of device limit by the service provider.
• C.The device limit is based on the license type that was purchased from Fortinet.
• D.The device limit is only applicable to enterprise edition.