Fortinet Exam FCSS_ADA_AR-6.7 Topic 4 Question 2 Discussion

Actual exam question for Fortinet's FCSS_ADA_AR-6.7 exam

Question #: 2
Topic #: 4

Refer to the exhibit.

Is the Windows agent delivering event logs correctly?

AThe agent is registered and it is sending logs correctly.

BThe logs are buffered by the agent and will be sent once the status changes to managed.

CBecause the agent is unmanaged. the logs are dropped silently by the supervisor.

DThe agent is not sending logs because it did not receive a monitoring template.
The Windows agent (fortibank_dc.fortibank.net) is in an 'Unmanaged' state, which indicates that it has not received a monitoring template from FortiSIEM. Without a template, the agent does not know what logs to collect or forward, meaning it is not sending logs to the supervisor.
The agent is registered, meaning it has completed the installation and connection process. Since it is unmanaged, it is not actively monitored or configured to send logs. To resolve this, the administrator must assign a monitoring template to enable proper log forwarding.

Show Suggested Answer

Suggested Answer: D

by Mariann at Apr 06, 2025, 02:49 PM

Limited Time Offer

25%

Off

Get Premium FCSS_ADA_AR-6.7 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Micaela

3 months ago

Wait, so the agent is just sitting there, twiddling its virtual thumbs, while the logs are piling up? That's just sad. Option A is the way to go, let's get this agent back on track!

upvoted 0 times

Jaime

2 months ago

Option A is the way to go, let's get this agent back on track!

upvoted 0 times

...

Paola

3 months ago

The logs are buffered by the agent and will be sent once the status changes to managed.

upvoted 0 times

...

Timothy

3 months ago

The agent is registered and it is sending logs correctly.

upvoted 0 times

...

Fredric

4 months ago

Ha! Unmanaged agent? More like *un*-managed agent, am I right? Seriously though, without a template, the poor thing doesn't know what to do. Option D is the clear winner here.

upvoted 0 times

Mitzie

2 months ago

C) Because the agent is unmanaged, the logs are dropped silently by the supervisor.

upvoted 0 times

...

Chi

2 months ago

B) The logs are buffered by the agent and will be sent once the status changes to managed.

upvoted 0 times

...

Hester

3 months ago

A) The agent is registered and it is sending logs correctly.

upvoted 0 times

...

Salina

4 months ago

I don't know, man. The agent could be in some kind of a limbo state. Maybe the logs are just chilling in the buffer, waiting to be unleashed. Option B sounds like a reasonable answer to me.

upvoted 0 times

...

Luz

4 months ago

I believe once the status changes to managed, the logs will be sent. So, option B seems like the correct answer.

upvoted 0 times

...

Lucia

4 months ago

The agent is definitely not sending logs correctly. The question clearly states it's unmanaged, so the logs are getting dropped. Option C is the way to go here.

upvoted 0 times