Which statement accurately contrasts lookup tables with watchlists?
A.
Lookup table values age out after a period, whereas watchlist values do not have any time condition.
B.
You can populate lookup tables through an incident, whereas you cannot populate watchlists through an incident.
C.
Lookup tables can contain multiple columns, whereas watchlists contain only a single column.
D.
You can reference lookup table data in analytic queries and reports almost immediately, whereas you may have to wait up to 5-10 minutes for watchlist entries to be useable in queries and reports.
The Answer Is:
C
This question includes an explanation.
Explanation:
Lookup tables and watchlists serve different purposes in Fortinet’s Advanced Analytics:
● Lookup tables allow for structured data storage with multiple columns, making them useful for correlating different attributes or key-value pairs.
● Watchlists are simpler and contain only a single column, often used for quick reference to flagged values, such as IP addresses or user accounts.
FCSS_ADA_AR-6.7 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"