最新的Fortinet FCSS_ADA_AR-6.7免費考試真題

問題1

Which statement accurately contrasts lookup tables with watchlists?

A. Lookup table values age out after a period, whereas watchlist values do not have any time condition.

B. You can populate lookup tables through an incident, whereas you cannot populate watchlists through an incident.

C. Lookup tables can contain multiple columns, whereas watchlists contain only a single column.

D. You can reference lookup table data in analytic queries and reports almost immediately, whereas you may have to wait up to 5-10 minutes for watchlist entries to be useable in queries and reports.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題2

Refer to the exhibit.

Consider a custom lookup table MalwareIPList. An analyst constructed an analytic query to reference the MalwareIPList lookup table.
What is the outcome of the analytic query?

A. The value for the LookupTableGet function in the analytic search can be either true or false.

B. The analyst receives an error because the LookupTableGet function can be used only in display filters to enrich data.

C. The permitted traffic IP address from the Phishing category is displayed.

D. The IP address from permitted traffic with a confidence score of 98 is displayed.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題3

Why do collectors communicate with the Supervisor after registration? (Choose two.)

A. To report its own health status

B. To report the health status of the agents

C. To upload event data if a worker down

D. To receive templates associated with agents

正確答案: A,C

說明：（僅 Fast2test 成員可見）

問題4

Refer to the exhibit.

What are three possible reasons why the Agent Status displays Running Inactive? (Choose three.)

A. The collector was not assigned to the agent

B. The template was removed

C. The template was not assigned

D. The agent was registered incorrectly

E. The agent is temporarily down

正確答案: C,D,E

說明：（僅 Fast2test 成員可見）

問題5

Refer to the exhibit.

A service provider does not have a dedicated worker in the cluster, but still wants to add a collector to an organization.
What option does the administrator have?

A. Define the supervisor IP address as a worker unload address

B. Install a worker

C. Define a pseudo address as a worker IP address

D. Ignore the warning and continue adding the collector

正確答案: A

說明：（僅 Fast2test 成員可見）

問題6

Refer to the exhibit.

Which deployment type is shown in the exhibit?

A. Service provider without collectors

B. Enterprise cloud deployment

C. Hybrid deployment with and without collectors

D. Service provider with collectors

正確答案: C

說明：（僅 Fast2test 成員可見）

問題7

Which three processes are collector processes? (Choose three.)

A. phReportMaster

B. phRuleMaster

C. phAgentManager

D. phMonitorAgent

E. phParser

正確答案: C,D,E

說明：（僅 Fast2test 成員可見）

最新的Fortinet FCSS—Advanced Analytics 6.7 Architect - FCSS_ADA_AR-6.7免費考試真題

聯系我們

站內鏈接

最新更新