Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Fortinet
Exam Format
70 min
35
Solution Specialist
Registration
Pearson VUE or online proctoring
English
Validity
2 years
Pass one NSE 6 exam and the NSE 7 exam within two years (extends certification by 2 years); Achieve or renew FCX Cybersecurity certification (extends certification by 3 years)
FCSS-ADA-AR-6-7 Exam Topics and Domains
FCSS-ADA-AR-6-7 is organized into 4 weighted domains. Expect to work with FortiSIEM, FortiSOAR, FortiSIEM Collectors, FortiSIEM Linux Agent, and more.
1
Multi-Tenancy SOC Solution for MSSP
25%
Multi-tenancy solutions for SOC environments
Multi-tenant FortiSIEM architectureHybrid environment deployment
- Identify various implementation requirements for a multi-tenant FortiSIEM deployment
- Design multi-tenant solutions with FortiSIEM
- Deploy FortiSIEM in a hybrid environment with and without collectors
Defining and deploying collectors and agents
FortiSIEM CollectorsFortiSOAR Connectors
- Define and deploy collectors and agents
- Deploy collectors in a multi-tenant environment
- Manage EPS assignment and restrictions on FortiSIEM
- Maintain and troubleshoot a collector installation
Windows and Linux Agents
Agent installation and management
- Install and manage FortiSIEM Windows and Linux agents
- Deploy and manage Windows and Linux agents
Resource utilization and management
Multi-tenant cluster resource management
Manage resource utilization of a multi-tenant FortiSIEM cluster
2
FortiSIEM Rules and Analytics
30%
FortiSIEM rule processing
Rule architecture and framework
Explain FortiSIEM rule processing
Constructing FortiSIEM rules
Single subpattern security rulesMultiple subpattern security rules
- Construct FortiSIEM rules
- Create rules by evaluating security events
- Define actions for a single pattern security rule
- Identify multiple pattern security rules and define conditions and actions for them
Advanced analytics techniques
Nested queriesLookup tables
- Configure advanced nested queries and lookup tables
- Examine nested queries for advanced analytics
- Configure lookup tables for advanced analytics
Clear conditions
Clear condition configuration
Configure clear conditions on FortiSIEM
3
FortiSIEM Baseline and UEBA
25%
Baseline and profile reports
Baseline conceptsBaseline profile creation
- Explain FortiSIEM baseline and profile reports
- Differentiate between a standard and baseline report
- Create your own baseline profiles
Baseline rules
Baseline rule construction
Construct FortiSIEM baseline rules
User and Entity Behavior Analytics (UEBA)
UEBA fundamentalsUEBA agent deploymentUEBA rules
- Configure UEBA on FortiSIEM
- Deploy FortiSIEM UEBA agents
- Examine log-based UEBA rules
- Explain UEBA on FortiSIEM
4
Conditions and Remediation
20%
FortiSIEM remediation
Manual remediationAutomatic remediationRemediation script development
- Remediate incidents on FortiSIEM both manually and automatically
- Analyze some out-of-the-box remediation scripts
- Configure various remediation methods on FortiSIEM
FortiSOAR remediation integration
FortiSIEM-FortiSOAR integrationFortiSOAR playbooksSOAR orchestration
- Remediate incidents through FortiSOAR
- Integrate FortiSOAR with FortiSIEM
- Remediate incidents from FortiSOAR
How do I earn this certification?
Passing FCSS-ADA-AR-6-7 earns the FCSS - Security Operations certification. It sits in the Security Operations track.
Current Level Exams
- NSE6_FSA - NSE 6 - FortiSIEM Analyst Choose ONE NSE 6 exam
- NSE6_FSOAR - NSE 6 - FortiSOAR Administrator Choose ONE NSE 6 exam
- FCSS_SOC_AN-7.4 - FCSS - Security Operations 7.4 AnalystAlternative NSE 7 exam in same track
Next Level Options
FCX_CYBER - FCX - Cybersecurity Highest level Fortinet certification
Alternative Paths
- FCSS_NS - FCSS - Network Security Parallel FCSS track focusing on network security solutions
- FCSS_PCS - FCSS - Public Cloud Security Cloud-focused security operations and monitoring
- FCSS_SASE - FCSS - Secure Access Service Edge Modern cloud-delivered security architecture
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for FCSS-ADA-AR-6-7.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2023-11-17
Updates
- FortiSIEM 6.7.4 Current exam version - all 6.7.x features may appear • Release date: 2023
- FortiSOAR 7.3.2 Current exam version - focus on playbooks and integration • Release date: 2023
- MITRE ATT&CK Framework Latest Understanding of framework required for threat modeling • Release date: Ongoing updates
Who should take this exam?
This exam is typically taken by Network security professionals and SOC analysts and engineers.
Understanding of FCP - FortiGate Security course content
Understanding of FCP - FortiGate Infrastructure course content
Understanding of FCP - FortiSIEM course content
- Python programming experience
- Jinja2 templating language knowledge
- Linux systems administration
- SOAR technologies familiarity
- Three years networking experience
- One year network security experience
- One year SOC or MSSP environment experience
- Hands-on experience with FortiSIEM and FortiSOAR deployment and administration
- Experience integrating FortiSIEM and FortiSOAR with Fortinet and third-party products