NSE7-SOC-AR-7-6: Fortinet NSE 7 - Security Operations 7.6 ArchitectDemo

Question

A large enterprise FortiSIEM deployment is encountering delays in log correlation and analytics.

Which architectural change is the most appropriate?

A Add more collectors.
B Increase supervisor CPU and memory.
C Limit the number of rules using streaming mode.
D Add more workers.

Explanation

FortiSIEM Worker nodes provide scale-out capacity for log processing, distributed event correlation, queries, and reporting. Adding Workers increases the processing resources available for correlation and analytics in a large deployment.

Learn more

FortiSIEM Node Types

NSE7-SOC-AR-7-6: Fortinet NSE 7 - Security Operations 7.6 ArchitectDemo

AstroTutor

Notes

Readiness

QuestionQ48

Community Discussion