최신Fortinet FCSS—Advanced Analytics 6.7 Architect - FCSS_ADA_AR-6.7무료샘플문제

A. phRuleWorker exists on the worker only.

B. phRuleWorker evaluates non-aggregate conditions as defined in subpattern filters of a rule in memory.

C. phRuleWorker exists on both the supervisor and workers.

D. phRuleWorker uses a 60-second bucket as an evaluation window.

A. 10.60.0.1

B. 10.50.0.149

C. 10.50.0.1

D. 10.50.0.150

A. Because some security-related incidents occur on a temporary basis.

B. Because too many active incidents can spike the resource usaqe on FortiSIEM.

C. Because availability or performance-related problems may trigger a threshold temporarily.

D. Because you need a way to reduce a backlog of incident responses.

A. The rule filters events with an event type that equals Domain Account Locked and a reporting IP that equals Domain Controller applications.

B. The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a user that belongs to the Domain Controller applications group.

C. The rule filters events with an event type that belong to the Domain Account Locked CMDB group or a reporting IP that belong to the Domain Controller applications group.

D. The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a reporting IP that belong to the Domain Controller applications group.

A. A sudden 150% increase in WMI response times over a 30-minute time window

B. A sudden 1.50 times increase in WMI response times over a 30-minute time window

C. A sudden 50% increase in WMI response times over a 30-minute time window

D. A sudden 75% increase in WMI response times over a 30-minute time window

A. LookupTableRetriev

B. LookupTableGet

C. LookupTableFilter

D. LookupTableHas

A. To prevent premature triggering of a rule before a baseline is set and becomes active

B. To fetch only values from the profile database that have numPoints greater than a certain threshold

C. To track the hour of the day for each data value

D. To ensure that the data points do not exceed a threshold value