Fortinet Exam FCSS_ADA_AR-6.7 Topic 3 Question 7 Discussion

Actual exam question for Fortinet's FCSS_ADA_AR-6.7 exam

Question #: 7
Topic #: 3

Which two statements about phRuleWorker are true? (Choose two.)

AphRuleWorker uses a 60-second bucket as an evaluation window.

BphRuleWorker evaluates non-aggregate conditions as defined in subpattern filters of a rule in memory.

CphRuleWorker exists on both the supervisor and workers.

DphRuleWorker exists on the worker only.
phRuleWorker processes events in 60-second intervals (buckets). This means that events within a one-minute window are evaluated together for rule conditions, helping detect patterns, correlations, and triggers.
phRuleWorker runs both on the supervisor and worker nodes to distribute event processing. The supervisor primarily orchestrates rule evaluation, while workers handle distributed event processing.

Show Suggested Answer

Suggested Answer: A, C

by Carma at May 03, 2025, 06:24 AM

Limited Time Offer

25%

29 days ago

I think A and C are true.

upvoted 0 times

...