Free Practice Fortinet FCSS_ADA_AR-6.7 Exam Questions 2026

Refer to the exhibit. This is an example of a baseline profile that is configured in the backend of FortiSIEM. Which two Group By attributes are configured for this profile? (Choose two.)

If a FortiSIEM rule is constructed to detect a potential data exfiltration attempt, which framework can provide insights on the techniques attackers might use for this purpose?

Refer to the exhibit.Consider a nested event query where both inner and outer queries are event queries. Reporting IP is selected from the CMDB group Network Device, Event Type is selected from the CMDB group Logon Success, and Source IP is selected from the report Failed Logons to Network Devices. An administrator is about to execute the nested query. The report time ranges must be set before execution. The Nested Time Range will be applied to which attributes?  

What is the primary function of FortiSIEM rule processing?

Which statement accurately contrasts lookup tables with watchlists?