Fortinet FCSS_ADA_AR-6.7 Exam Prep
FCSS - Advanced Analytics 6.7 Architect (Page 5 )

• Sales processes: Define the available Opportunity stages for each team.
• Record types: Connect each team to its appropriate sales process and page layout.
• Page layouts: Control which fields and related sections each team sees.

• Solar market team 1
• Solar market team 2
• Installation Services team

• One sales process: Cannot provide different Opportunity stages for each team.
• One page layout: Cannot provide different field arrangements or fields by team.
• Three page layouts alone: Page layouts control fields, but not the available stages.

• Actions that call external APIs
• Subflows
• Connection and credential aliases
• Supporting integration logic

• Action — A reusable operation within a flow, such as “Create a record” or “Send email.”
• Connection — Defines how ServiceNow authenticates and communicates with an external system.
• Integration step — A general flow step, not the name for the packaged integration.

1. Which host originated the infection
2. Whether each other host is clean or infected
3. Which firewall or host logs provide evidence of the infection’s movement

• Find the earliest infection-related event. The host associated with that event is the likely origin.
• Follow the timeline: outbound connections from that host may indicate propagation or command-and-control activity.
• A host receiving suspicious traffic is not automatically infected; look for evidence that it executed or initiated malicious activity.
• A firewall log can show traffic paths, but endpoint logs are usually needed to confirm infection.
• Mark a host clean only when the logs show no indicators of compromise or malicious activity.

1. Wireless AP

1. Router

1. Firewall

1. Device placement

• Denial-of-service: Prevents users from accessing a service; it does not normally redirect them.
• Social engineering: Manipulates people into taking an action, such as clicking a malicious link, but does not directly alter DNS resolution.
• ARP spoofing: Associates the attacker’s MAC address with another device’s IP address on a local network. It can intercept traffic, but the described website redirection is most specifically DNS poisoning.

• Treatment one – easier to prepare: Convenience for the accounting team is not the main objective of financial reporting.
• Treatment two – fair representation: This is the correct choice because financial statements must faithfully represent the underlying transaction and its economic substance.
• Treatment three – maximises profit: Accounting policies must not be selected simply to manipulate or inflate reported profit.
• Treatment four – easier to understand: Understandability is important, but it cannot justify presenting information that is less faithfully represented.

• C: Develop the rule in the Rules Editor, define the events, match, and condition sections, then use the test rule feature. This directly validates the YARA-L rule without enabling it in production.
• A: UDM Search can help investigate data and refine filters, but it does not fully test YARA-L logic—especially complex event joins, match windows, and conditions.

• Reduce the training data: Usually makes overfitting worse.
• Add hyperparameters: Hyperparameters already control training; simply adding them does not solve the problem. Proper tuning could help, but that is not what the option states.
• Increase training time: More training can worsen overfitting if the model is already memorizing the training data.

• Data owners: Decide who should have access and approve the access rules.
• Business process owners: May help define business requirements, but normally do not enforce technical permissions.
• Security steering committee: Provides governance and direction; it does not manage individual access rights.
• Security administrators: Apply and enforce the approved access controls.

• Required response time
• Resolution time
• Availability or uptime
• Support hours
• Performance targets
• Consequences if targets are missed

• SOW (Statement of Work): Defines the project’s scope, tasks, deliverables, and schedule.
• MOA (Memorandum of Agreement): Describes the responsibilities and commitments between parties.
• MOU (Memorandum of Understanding): Documents a general mutual understanding or intent, often before a formal agreement.

• ?? ?? ?? ??
• ?? NFS ?? SMB ?? ??
• ?? ???? ???
• ?? IP ??? ???? ?? ???
• ??? ?? ???? ?????

• B: ????? NFS ? Snowball Edge? ?? ?? ? AWS? ?? ? S3
• D: ????? NFS ? ????/Direct Connect ? File Gateway ? S3

• D — Managers focus on keeping costs low in the short term to maximise profits.

• E — Managers are given incentives to meet or undercut budgets.

• F — Managers delegate responsibility simply to reduce their workload.

• B. Conditional access policies

• D. Additional authentication factors

• Disciplinary actions: Punish users but do not prevent credential-based attacks.
• More regular account audits: Useful for finding inactive or excessive accounts, but less direct for stopping unauthorized logins.
• Content filtering: Primarily controls web or email content, not authentication.
• Review of permissions: Reduces privilege but may not stop unauthorized account access.

• SQL injection
• Cross-site scripting (XSS)
• Malicious or malformed web requests
• Some application-layer attacks

• Layer 4 firewall: Filters based mainly on IP addresses, ports, and transport protocols; it cannot deeply inspect web application content.
• NGFW: Provides advanced network filtering and may include application awareness, but a WAF is more specifically designed to protect web applications.
• UTM: Combines several security functions in one appliance, but it is not the most targeted solution for a web portal.

Statement 1 — Correct

Statement 2 — Correct

• B — Data source settings in Power BI Desktop:

• D — Formula bar in Power Query Editor:

m 
  Excel.Workbook(File.Contents("new path"))

• E — Advanced Editor in Power Query Editor:

• A: Dataset settings in the Power BI service mainly handle credentials and gateway settings, not changing the local file path embedded in the PBIX.
• C: Current File data-load settings control refresh/load behavior, not the source location.

• A. IDS attack signatures: An IDS mainly detects suspicious network traffic. It is not the best control for scanning uploaded documents.
• C. Load balancer: Distributes traffic among servers and can improve availability, but does not specifically detect malware.
• D. WAF: Protects web applications from attacks such as SQL injection and command injection. It may inspect web requests, but malware scanning of PDF files is not its primary function.

• # Development
• # Testing
• # Production

• Separate endpoints: relate to compute or connectivity, not dashboard labels.
• Separate queries: retrieve or transform data but do not designate visual sections.
• Direct text written into the dashboard in editing mode: dashboards use text boxes, typically with Markdown formatting, rather than arbitrary text placed directly on the canvas.

• Undefined or blank values
• Relationship matching problems
• Duplicate or conflicting keys
• Errors when querying the model

• Normalize all values to upper- or lowercase in the source query or Power Query.
• Add an index or surrogate key when values that differ only by case must remain distinct.

• Company documents
• Databases
• Knowledge bases
• Current web or business data

• A: Describes diversity and inclusive design, not grounding.
• B: Describes explainability or model interpretability.
• D: Describes documenting a model’s capabilities and limitations.

• Bronze: Raw ingested data
• Silver: Cleaned, validated, and transformed data
• Gold: Business-level data for analytics, dashboards, and reporting

• Repetitive and time-consuming
• Based on measurable conditions, such as last check-in time
• Easy to automate with alerts, dashboards, or scheduled reports
• Important for ensuring scan coverage

• Assigning custom recommendations usually requires analyst judgment and context.
• Analyzing false positives can sometimes be assisted by automation, but validation often requires human review.
• Rendering an additional executive report increases reporting activity rather than reducing a core operational workload.

• Prevention costs: Avoiding defects, such as staff training and improved product design. The company has invested in these.
• Appraisal costs: Detecting defects before products reach customers, such as inspection and testing. The planned batch sampling has not been implemented.
• Internal failure costs: Correcting defects found before delivery.
• External failure costs: Dealing with defects after delivery, such as refunds, replacements, complaints and lost sales.

• Root path cost
• Port priority
• Port ID

text 
interface GigabitEthernet0/1 
 spanning-tree vlan 10 port-priority 64

• Interface number: Helps form the port ID but is not normally configured as the preference value.
• VLAN priority: Not used to select a preferred forwarding interface.
• Hello time: Controls how often BPDUs are sent; it does not select a preferred port.

• Shared capacity

• Fabric capacity — F SKUs

• Fabric trial capacity

• Existing Power BI Premium — P SKUs

• Physical: Protects facilities or equipment, such as locks and security cameras.
• Technical: Uses technology, such as firewalls, encryption, or access controls.
• Operational: Covers day-to-day actions and processes, such as training, backups, or incident response.
• Managerial: Includes policies, standards, risk assessments, and procedures.

• FTP — Transfers files using a client/server model and supports authentication. It uses separate control and data connections.
• TFTP — A very simple file-transfer protocol with no authentication and minimal features. Commonly used to transfer router or switch configuration files and IOS images.
• SCP — Securely copies files over SSH. It provides encryption and authentication.
• SFTP — Also transfers files securely through SSH, but provides more file-management capabilities than traditional SCP.
• HTTP/HTTPS — Primarily web protocols, but can also download files; HTTPS encrypts the session.

• TFTP = simple, unauthenticated file transfer
• FTP = file transfer with authentication, but not inherently encrypted
• SCP/SFTP = secure file transfer using SSH

• Vulnerability scanner: Finds known technical weaknesses in systems or applications, but does not provide complete supply-chain visibility.
• Penetration test: Simulates attacks against defined targets; it is narrower than a full supply-chain analysis.
• SCAP: A set of standards and protocols for automated security configuration and vulnerability assessment, not a comprehensive supply-chain mapping tool.

• Structure requirements documents
• Draft user stories and acceptance criteria
• Create templates for functional and nonfunctional requirements
• Turn natural-language descriptions into organized documentation or implementation examples

• A: “Automatically generating detailed requirements documents” overstates Copilot’s role; it assists but does not independently determine complete requirements.
• C: /help provides guidance about Copilot features, not reliable requirements-conflict detection.
• D: Stakeholder communication and meetings remain human responsibilities.

• Reconnaissance: Gathering information about the target.
• Weaponization: Creating or combining a malicious payload with a delivery method.
• Delivery: Sending the payload, such as through phishing.
• Exploitation: Triggering a vulnerability or weakness to gain execution or access.

• A is incorrect: Flow Debugger is for debugging Salesforce Flows, not Trust Layer masking.
• B is incomplete/misleading: Requesting audit data may be part of reviewing the results, but collection and storage must first be enabled.
• C is correct: It describes the initial validation step.

• Annual interest payments net of tax relief (A): future cash outflows for the issuer.
• Redemption value (B): the final cash outflow when the bond is redeemed.
• Market value now (C): the cash proceeds received now, acting as the initial cash flow in the IRR calculation.

• The product is already in production.
• The organization is examining the product’s functions and cost drivers.
• The objective is to reduce cost without reducing perceived value or required quality.

• Kaizen costing focuses on continuous, usually incremental, cost reductions during the manufacturing stage. It is not specifically the systematic examination of a product’s functions.
• Standard costing compares actual costs with predetermined standards; it is a control technique, not a product redesign method.
• Process innovation concerns developing significantly improved production processes, rather than analysing the product’s functions and value.

• The vulnerability scan identifies a vulnerability.
• The administrator verifies that the vulnerability is not present.
• Therefore, the scan produced a false positive.

• True positive: A vulnerability is reported and genuinely exists.
• False negative: A vulnerability exists, but the scan fails to detect it.
• True negative: No vulnerability exists, and the scan correctly reports no issue.

• To identify the number of errors: select Column quality. It shows the percentage and count of Valid, Error, and Empty values for each column.
• To resolve errors: use the appropriate error transformation:

• Azure Cosmos DB is a globally distributed NoSQL database service. It stores and retrieves application data, but it does not provide the complete environment for building, testing, and deploying predictive analytics models.
• Azure Machine Learning is the appropriate service for this requirement. It supports creating experiments, training and testing models, and deploying them for predictions.
• Azure Machine Learning Studio provides the browser-based interface for these tasks.

• Data source: Folder
• Transformation: Remove the Content column (or keep only the file-metadata columns)

Why

• File name
• Extension
• Date modified
• Folder path
• Content — the binary contents of the file

• Use the grant-date fair value: $30
• Do not remeasure to the year-end value of $45
• Update the estimate of employees expected to vest

• Dr Share-based payment expense $450,000
• Cr Equity/share option reserve $450,000

• Document feeder: A scratch, dirt, or debris on the feeder glass or rollers can create a line on every scanned image.
• Pickup rollers: Move paper through the printer; they would not normally create a scanner-only line.
• Corona wire: Affects toner charging and would cause defects on printed output.
• Drum assembly: Also affects printed pages, so faxes and computer print jobs would show the line too.

• A local network gateway represents an on-premises network—its address space and VPN device information—for an Azure Site-to-Site VPN connection.
• It does not control which connection types are allowed between Azure web servers and database servers.
• It is also unnecessary when both server groups are in the same Azure virtual network.

• Case Assignment Rules normalmente são avaliadas quando o caso é criado. Elas podem ser executadas novamente em uma edição somente se o usuário marcar “Assign using active assignment rules”; isso não acontece automaticamente apenas porque o caso foi fechado.
• Portanto, criar uma regra de atribuição não corrige os centenas de casos já fechados e não garante, por si só, que um caso será transferido antes de ser fechado.

• B — Usar uma ferramenta de dados: corrige os registros históricos já existentes, atualizando o Owner.
• D — Criar uma regra de validação: impede que um caso seja fechado enquanto ainda pertence a uma fila. Exemplo conceitual: se Status = Closed e o proprietário for uma fila, bloquear o salvamento.

• A — Consumption-based pricing: AWS generally uses a pay-as-you-go model. You pay for the resources you consume rather than purchasing hardware upfront or paying for unused capacity.
• C — Economies of scale: AWS purchases and operates infrastructure at a very large scale, allowing it to reduce costs and pass some savings to customers through lower service prices.

• Perpetual licenses: These involve paying once for permanent software ownership and are not a primary AWS Cloud economic benefit.
• AWS Enterprise Support at no additional cost: Enterprise Support has an additional charge.
• Bring-your-own-hardware model: AWS provides and manages the underlying cloud infrastructure; customers do not normally bring their own physical servers.

• A — Technical review by business owner: A business owner may approve the business impact, but a technical review is normally performed by technical personnel.
• C — Cost-benefit analysis after implementation: Cost-benefit analysis should occur before implementation to support the approval decision.
• D — Business continuity testing: This can be appropriate for major changes, but it is primarily part of business continuity and disaster recovery planning—not a universal change-management activity.

• Wireshark captures packets and allows you to examine their contents, potentially revealing usernames and passwords sent without encryption.
• Netcat creates network connections and can send or receive data, but it is not primarily a packet-analysis tool.
• Nessus scans for known vulnerabilities and configuration issues; it generally would not prove that credentials are visible in transit.
• Nmap performs network discovery and port/service scanning, not detailed packet-content inspection.

• Accept: Acknowledge the risk and take no additional action.
• Transfer: Shift the risk or its financial impact to another party, such as through insurance or outsourcing.
• Mitigate: Reduce the likelihood or impact of the risk, such as by implementing security controls.
• Avoid: Eliminate the activity or exposure that creates the risk.

• Compute: Not used; no virtual warehouse is required.
• Data Storage: Not scanned again.
• Metadata: May help Snowflake manage and validate cached results, but it is not the Snowflake architectural layer identified as serving the request.
• Cloud Services: Handles query coordination, metadata services, authentication, and result-cache access.

• Error correction (ECC): Improves data reliability but does not maximize bandwidth.
• RAM voltage: Increasing voltage may affect stability or speed, but it is not the primary method for increasing module bandwidth.
• Physical module size: Refers to the capacity or form factor of the RAM, not its data-transfer bandwidth.

• Label applied does not automatically exclude a file from Copilot.
• Encryption/usage rights determine whether Copilot can access the file’s content.
• If the user has no permission under Label2, File3 should be unavailable to Copilot for that user.
• File3’s label might be inherited by derived content only if File3 was actually processed and contributed by an authorized user; it should not be treated as contributing merely because it exists in the source set.