Fortinet Exam FCSS_ADA_AR-6.7 Topic 4 Question 4 Discussion

Actual exam question for Fortinet's FCSS_ADA_AR-6.7 exam

Question #: 4
Topic #: 4

Refer to the exhibit.

If the Z-score for this rule is greater than or equal to three, what does this mean?

AThe rate of firewall connection is below historical average value.

BThe rate of firewall connection is optimum.

CThe rate firewall connection is above the historical average value.

DThe rate of firewall connection is above the current average value.
The Z-score formula in the expression builder calculates how many standard deviations the current value is from the historical average. The formula used is:

AVG(Firewall Session) represents the current firewall session rate.
STAT_AVG(AVG(Firewall Session);112) represents the historical average over a 112-time unit window.
STAT_STDDEV(AVG(Firewall Session);112) represents the historical standard deviation over the same period.
A Z-score 3 indicates that the current firewall session rate is significantly higher than the historical average (3 standard deviations above the mean), signaling an anomaly.

Show Suggested Answer

Suggested Answer: C

by Alline at Apr 05, 2025, 05:45 PM

Limited Time Offer

25%

24 days ago

I think the answer is C) The rate firewall connection is above the historical average value.

upvoted 0 times

...