QuestionQ1

Collect and analyze event data

Refer to the exhibit.

Question Image

What occurs when a device analyzed by the machine-learning configuration shown has consistently high memory utilization?

  • A FortiSIEM will update the regression tables for memory utilization, and average sent and received bytes.
  • B FortiSIEM will trigger an incident for high memory utilization.
  • C FortiSIEM will lower the CPU utilization trigger requirement for CPU utilization.
  • D FortiSIEM will update the model with a higher memory utilization average value.
Explanation

A regression model uses average memory utilization as a feature and average CPU utilization as its target. Sustained memory-utilization values become part of the model’s learned input pattern and raise its learned memory-utilization baseline; high memory utilization itself is not the target condition for an incident. FortiSIEM documents regression as predicting a target field from other feature fields.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!