Fortinet Exam FCSS_ADA_AR-6.7 Topic 1 Question 1 Discussion

Actual exam question for Fortinet's FCSS_ADA_AR-6.7 exam

Question #: 1
Topic #: 1

Refer to the exhibit.

An administrator runs an analytic search for all FortiGate SSL VPN logon failures. The results are grouped by source IP, reporting IP, and user. The administrator wants to restrict the results to only those rows where the COUNT >=3.

Which user would meet that condition?

AJan

BSarah

CAdmin

DTom
The administrator is running an analytic search that groups results by Source IP, Reporting IP, and User, and filters only those with a COUNT >= 3.
Looking at the data:
Admin has three failed attempts from the same Source IP (203.0.113.4) and Reporting IP (10.0.1.99).
Jan and Sarah appear only once or twice in the dataset.
Tom has multiple entries, but they are from different Source IPs and Reporting IPs, meaning they are not counted as three under the same group.

Show Suggested Answer

Suggested Answer: C

by Roxanne at Apr 03, 2025, 12:06 PM

Limited Time Offer

25%

Off

Get Premium FCSS_ADA_AR-6.7 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Barrie

5 days ago

I agree with you, Bulah. Admin is the only one who meets the condition of having a COUNT >= 3 in the dataset.

upvoted 0 times

...

Franklyn

8 days ago

Hmm, I think the correct answer is B. Franklyn, since the question says the results are grouped by Source IP, Reporting IP, and User, and the count must be >= 3. From the data, it looks like Admin is the only one who meets that condition.

upvoted 0 times

...

Bulah

12 days ago

I think the answer is C) Admin because they have three failed attempts from the same Source IP and Reporting IP.

upvoted 0 times

...