FCP_FAZ_AD-7.4 practice questions 21–30

1. Question 21 · 48 in bank

   Refer to the exhibit.

   

   The exhibit shows the creation of a new administrator on FortiAnalyzer. The new account uses the credentials stored on an LDAP server. Why would an administrator configure a password for this account?

   • AThis password is used if the authentication server becomes unreachable.
   • BThis password authenticates FortiAnalyzer against the LDAP server.
   • CThis password is set to comply with FortiAnalyzer password policy.
   • DThis password is required because this is a restricted user.

   Show answer

   Answer: A

   Next question

2. Question 22 · 48 in bank

   In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?

   • AThe traffic destination is another FortiGate in the fabric.
   • BThe upstream FortiGate is configured to do NAT.
   • CLog redundancy is configured in the fabric.
   • DThe downstream device cannot connect to FortiAnalyzer.

   Show answer

   Answer: B

   Next question

3. Question 23 · 48 in bank

   Which two statements about high availability (HA) on FortiAnalyzer are true? (Choose two.)

   • AFortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.
   • BFortiAnalyzer HA active-passive mode can function without VRRP.
   • CAll devices in a FortiAnalyzer HA cluster must run in the same operation mode, either analyzer mode or collector mode.
   • DAll devices in a FortiAnalyzer HA cluster must have the same available disk space.

   Show answer

   Answer: C

   Next question

4. Question 24 · 48 in bank

   Which two statements about deleting ADOMs are true? (Choose two.)

   • ALogs must be purged or migrated before you can delete an ADOM.
   • BADOMs with registered devices cannot be deleted.
   • CDefault ADOMs cannot be deleted.
   • DThe status of the ADOMs must be unlocked.

   Show answer

   Answer: C

   Next question

5. Question 25 · 48 in bank

   Refer to the exhibit.

   

   The capture displayed was taken on a FortiAnalyzer. Why is a single IP address shown as the source for all logs received?

   • AFortiAnalyzer is using the device MAC addresses to differentiate their logs.
   • BThe logs belong to devices that are part of a high availability (HA) cluster.
   • CFortiAnalyzer is receiving logs from the root FortiGate of a Security Fabric.
   • DThe device sending logs has two VDOMs in the same ADOM.

   Show answer

   Answer: B

   Next question

6. Question 26 · 48 in bank

   What does the disk status Degraded mean for RAID management?

   • AThe hard drive is no longer being used by the RAID controller.
   • BOne or more drives are missing from the FortiAnalyzer unit.
   • CThe device is writing data to the disk to restore the volume to an optimal state.
   • DFortiAnalyzer determined that the parity data in the disk is not valid.

   Show answer

   Answer: A

   Next question

7. Question 27 · 48 in bank

   Which process is responsible for enforcing the log file size?

   • Aoftpd
   • Bmiglogd
   • Csqlplugind
   • Dlogfiled

   Show answer

   Answer: D

   Next question

8. Question 28 · 48 in bank

   Which two statements about FortiAnalyzer operating modes are true? (Choose two.)

   • AWhen in collector mode, FortiAnalyzer offloads the log receiving task to the analyzer.
   • BWhen in analyzer mode, FortiAnalyzer supports event management and reporting features.
   • CFor the collector, you should allocate most of the disk space to analytics logs.
   • DAnalyzer mode is the default operating mode.

   Show answer

   Answer: D

   Next question

9. Question 29 · 48 in bank

   Select 2

   Which two statements regarding FortiAnalyzer log forwarding modes are true? (Choose two.)

   • ABoth modes, forwarding and aggregation, support encryption of logs between devices.
   • BIn aggregation mode, you can forward logs to syslog and CEF servers.
   • CForwarding mode forwards logs in real time only to other FortiAnalyzer devices.
   • DAggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.

   Show answer

   Answer: AD

   Next question

10. Question 30 · 48 in bank

    Select 2

    You are trying to initiate an authorization request from FortiGate to FortiAnalyzer, but the Security Fabric window does not open when you click Authorize. Which two reasons can cause this to happen? (Choose two.)

    • AA pre-shared key needs to be established on both sides.
    • BThe management computer does not have connectivity to the authorization IP address and port combination.
    • CThe Security Fabric root is unauthorized and needs to be added as a trusted host.
    • DThe fabric authorization settings on FortiAnalyzer are misconfigured.

    Show answer

    Answer: BD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FAZ_AD-7.4 practice, question 21. 48 questions available.