NSE7_ADA-6.3 Exam Training Practice Tests (Fortinet NSE 7

Question 1

How can you invoke an integration policy on FortiSIEM rules?

A. Through remediation scripts B. Through Notification Policy settings C. Through Incident Notification settings D. Through External Authentication settings

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

What happens to UEBA events when a user is off-net?

A. The agent will drop the events if it cannot upload them to a FortiSIEM collector B. The agent will cache events locally if it cannot upload them to a FortiSIEM collector C. The agent will upload the events to the Worker if it cannot upload them to a FortiSIEM collector D. The agent will upload the events to the Supervisor if it cannot upload them to a FortiSIEM collector

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit.

Which statement about the rule filters events shown in the exhibit is true?

A. The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a user that belongs to the Domain Controller applications group. B. The rule filters events with an event type that belong to the Domain Account Locked CMDB group or a reporting IP that belong to the Domain Controller applications group. C. The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a reporting |P that belong to the Domain Controller applications group. D. The rule filters events with an event type that equals Domain Account Locked and a reporting IP that equals Domain Controller applications.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Which three processes are collector processes? (Choose three.)

A. phParser B. phAgentManaqer C. phReportM aster D. phMonitorAgent E. phRuleMaster

Correct Answer: A,D,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 7 - Advanced Analytics 6.3 - NSE7_ADA-6.3 Exam Practice Test