Fortinet NSE7_ADA-6.3 Prüfungsthemen:
| Abschnitt | Gewichtung | Ziele |
|---|---|---|
| Thema 1: FortiSIEM-Regeln | 30% | - Regelarchitektur und Bestandteile - Vorfallserstellung und Korrelation - Regeln mit mehreren Teilmustern - Sicherheitsregel mit einem einzelnen Teilmuster |
| Thema 2: Freigabebedingungen und Abhilfemaßnahmen | 20% | - Methoden und Abläufe zur Abhilfe - Integration von FortiSOAR mit FortiSIEM - Definition von Freigabebedingungen - Automatisierte Reaktionsmaßnahmen |
| Thema 3: Mehrmandantenfähige SOC-Lösung für MSSP | 25% | - Festlegen von Collectoren und Agenten - Betrieb von Collectoren - Einführung in die Mehrmandantenfähigkeit - Windows- und Linux-Agenten |
| Thema 4: FortiSIEM-Baseline und UEBA | 25% | - Integration des MITRE ATT&CK-Frameworks - Einführung in die Baseline-Berechnung - Konfiguration und Feinabstimmung der Baseline - Verhaltensanalyse von Nutzern und Entitäten (UEBA) |
Fortinet NSE 7 - Advanced Analytics 6.3 NSE7_ADA-6.3 Prüfungsfragen mit Lösungen
1. Refer to the exhibit.
The service provider deployed FortiSIEM without a collector and added three customers on the supervisor.
What mistake did the administrator make?
A) Collectors must be deployed on all customer premises before they are added to organizations on the supervisor.
B) At least one collector must be deployed to collect logs from service provider infrastructure devices.
C) Customer A and customer B have overlapping IP addresses.
D) The number of workers on the FortiSIEM cluster must match the number of customers added.
2. Refer to the exhibit. Click on the calculator button.
The profile database contains CPU utilization values from day one. At midnight on the second day, the CPU utilization values from the daily database will be merged with the profile database.
In the profile database, in the Hour of Day column where 9 is the value, what will be the updated minimum, maximum, and average CPU utilization values?
A) Min CPU Util=33.50, Max CPU Ucil=33.50 and AVG CPU Util=33.50
B) Min CPU Util=32.31, Max CPU Ucil=33.50 and AVG CPU Util=32.67
C) Min CPU Util=32.31, Max CPU Ucil=32.31 and AVG CPU Util=32.31
D) Min CPU Util=32.31, Max CPU Ucil=33.50 and AVG CPU Util=33.50
3. What happens to UEBA events when a user is off-net?
A) The agent will cache events locally if it cannot upload them to a FortiSIEM collector
B) The agent will upload the events to the Worker if it cannot upload them to a FortiSIEM collector
C) The agent will drop the events if it cannot upload them to a FortiSIEM collector
D) The agent will upload the events to the Supervisor if it cannot upload them to a FortiSIEM collector
4. How can you invoke an integration policy on FortiSIEM rules?
A) Through remediation scripts
B) Through External Authentication settings
C) Through Incident Notification settings
D) Through Notification Policy settings
Fragen und Antworten:
| 1. Frage Antwort: C | 2. Frage Antwort: B | 3. Frage Antwort: A | 4. Frage Antwort: D |
1302 Kundenbewertungen
