FCSS_ADA_AR-6.7 Online Practice Questions

Home / Fortinet / FCSS_ADA_AR-6.7

Latest FCSS_ADA_AR-6.7 Exam Practice Questions

The practice questions for FCSS_ADA_AR-6.7 exam was last updated on 2025-06-01 .

Viewing page 1 out of 8 pages.

Viewing questions 1 out of 44 questions.

Question#1

In a customer network that includes a collector, which device performs device discoveries?

A. Agent
B. Supervisor
C. Worker
D. Collector

Explanation:
In a FortiSIEM deployment, device discovery is handled by the Supervisor, even when a Collector is present.
● The Supervisor initiates active scans using protocols such as SNMP, WMI, SSH, and API queries to discover devices in the network.
● Collectors do not perform discovery; they primarily collect and forward logs from designated devices to the Supervisor.
● Workers handle event processing, not discovery.

Question#2

What three key metrics does a UEBA agent capture? (Choose three.)

A. Process
B. Location
C. Keystroke logging
D. User
E. Device

Question#3

Refer to the exhibit.



Based on the information provided in the exhibit, calculate the unused events for the next three minutes for a 520 EPS license.

A. 72460
B. 73460
C. 74460
D. 71460

Question#4

Refer to the exhibit.



An administrator wants to remediate the incident from FortiSIEM shown in the exhibit.
What option is available to the administrator?

A. Quarantine IP FortiClient
B. Run the block MAC FortiO
C. Run the block IP FortiOS 5.4
D. Run the block domain Windows DNS

Question#5

Refer to the exhibit.



An administrator applies the rule exception shown in the exhibit.
How does this configuration impact the incident generation for that rule?

A. Incidents will not be generated during the specified period.
B. Incidents will be generated only during the specified period.
C. Incidents will be generated without triggering an email alert during the specified period.
D. Events will not be processed by the rule during the specified period.

Explanation:
From the exhibit, the rule exception is set for:
● Time Range: Starts at 00:00:00
● Duration: 2 days
● Recurrence Pattern: December 25th and December 26th
This means that during these two days (every year in December), the rule will not trigger incidents.
Rule exceptions temporarily suppress incident generation during the specified period.
Events are still processed, but no incidents are generated.

Exam Code: FCSS_ADA_AR-6.7Q & A: 123 Q&AsUpdated:  2025-06-01

 Get All FCSS_ADA_AR-6.7 Q&As