Fortinet Exam FCSS_ADA_AR-6.7 Topic 4 Question 2 Discussion

Actual exam question for Fortinet's FCSS_ADA_AR-6.7 exam

Question #: 2
Topic #: 4

Refer to the exhibit.

Is the Windows agent delivering event logs correctly?

AThe agent is registered and it is sending logs correctly.

BThe logs are buffered by the agent and will be sent once the status changes to managed.

CBecause the agent is unmanaged. the logs are dropped silently by the supervisor.

DThe agent is not sending logs because it did not receive a monitoring template.
The Windows agent (fortibank_dc.fortibank.net) is in an 'Unmanaged' state, which indicates that it has not received a monitoring template from FortiSIEM. Without a template, the agent does not know what logs to collect or forward, meaning it is not sending logs to the supervisor.
The agent is registered, meaning it has completed the installation and connection process. Since it is unmanaged, it is not actively monitored or configured to send logs. To resolve this, the administrator must assign a monitoring template to enable proper log forwarding.

Show Suggested Answer

Suggested Answer: D

by Mariann at Apr 06, 2025, 02:49 PM

Limited Time Offer

25%

Off

Get Premium FCSS_ADA_AR-6.7 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Luz

4 days ago

I believe once the status changes to managed, the logs will be sent. So, option B seems like the correct answer.

upvoted 0 times

...

Lucia

5 days ago

The agent is definitely not sending logs correctly. The question clearly states it's unmanaged, so the logs are getting dropped. Option C is the way to go here.

upvoted 0 times

...

German

9 days ago

I agree with Corinne. The agent is registered but unmanaged, so it needs a monitoring template to start sending logs.

upvoted 0 times

...

Corinne

12 days ago

I think the Windows agent is not delivering logs because it did not receive a monitoring template.

upvoted 0 times

...