Fortinet NSE7_ADA-6.3 - NSE 7 - Advanced Analytics 6.3 Exam
Page: 3 / 7
Total 33 questions
Question #11 (Topic: Exam A)
Which three processes are collector processes? (Choose three.)
A. phAgentManager
B. phParser
C. phRuleMaster
D. phReportMaster
E. phMonitorAgent
Answer: ABE
Question #12 (Topic: Exam A)
Which statement about EPS bursting is true?
A. FortiSIEM will let you burst up to five times the licensed EPS once during a 24-hour period.
B. FortiSIEM must be provisioned with ten percent the licensed EPS to handle potential event surges.
C. FortiSIEM will let you burst up to five times the licensed EPS at any given time, provided it has accumulated enough unused EPS.
D. FortiSIEM will let you burst up to five times the licensed EPS at any given time, regardless of unused of EPS.
Answer: C
Question #13 (Topic: Exam A)
On which disk are the SQLite databases that are used for the baselining stored?
A. Disk1
B. Disk4
C. Disk2
D. Disk3
Answer: A
Question #14 (Topic: Exam A)
Refer to the exhibit.
The rule evaluates multiple VPN logon failures within a ten-minute window. Consider the following VPN failure events received within a ten-minute window:
How many incidents are generated?
The rule evaluates multiple VPN logon failures within a ten-minute window. Consider the following VPN failure events received within a ten-minute window:
How many incidents are generated?
A. 1
B. 2
C. 0
D. 3
Answer: D
Question #15 (Topic: Exam A)
Refer to the exhibit.
How long has the UEBA agent been operationally down?
How long has the UEBA agent been operationally down?
A. 21 Hours
B. 9 Hours
C. 20 Hours
D. 2 Hours
Answer: C
