Question 1

What are the benefits of configuring UEBA on FortiSIEM?

Options :

A : Enhanced encryption algorithms for data at rest?

B : Improved detection of insider threats?

C : Automated response to all network events?

D : Ability to spot unusual behavior patterns of users and entities?

Answer: B,D

Question 2

What are the two SQLite databases that are used for baseline data? (Choose two.)

Options :

A : Event database

B : Daily database

C : Weekly database

D : Profile database

Answer: B,D

Question 3

Which organization do agents belong to after registration? (Choose two.)

Options :

A : The windows agents belong to the super organization.

B :

The agents belong to the organization specified in the agent installation setup wizard for Windows platforms.

C : The Linux agents belong to the super local organization.

D :

The agents belong to the organization specified in the command line parameters for Linux platforms.

Answer: D

Question 4

UEBA in the context of FortiSIEM stands for:

Options :

A : User and Entity Behavior Analytics?

B : User Event Baseline Algorithm?

C : Unified Endpoint Baseline Assessment?

D : Unified Encryption Behavior Analysis?

Answer: A

Question 5

Refer to the exhibit.

Which statement about the rule filters events shown in the exhibit is true?

Options :

A :

The rule filters events with an event type that equals Domain Account Locked and a reporting IP that equals Domain Controller applications.

B :

The rule filters events with an event type that belong to the Domain Account Locked CMDB group or a reporting IP that belong to the Domain Controller applications group.

C :

The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a reporting IP that belong to the Domain Controller applications group.

D :

The rule filters events with an event type that belong to the Domain Account Locked CMDB group and a user that belongs to the Domain Controller applications group.

Answer: C

Smartly Prepare Exam with Free Online FCSS_ADA_AR-6.7 Practice Test

Buying Options: