FCP_FAZ_AN-7.6 practice questions 1–10

1. Question 1 · 50 in bank

   Refer to the exhibit.

   

   What is the purpose of using the Chart Builder feature on FortiAnalyzer7?

   • ATo build a chart automatically based on the top 100 log entries
   • BTo add charts to generate reports directly in the current ADOM
   • CTo add a new chart under FortiView to be used in new reports
   • DTo build a dataset and chart based on the filtered search results

   Show answer

   Answer: D

   Next question

2. Question 2 · 50 in bank

   Select 3

   Which three modules does FortiAnalyzer automatically download content from with a valid SOC Automation service license? (Choose three.)

   • AReport templates
   • BDashboards
   • CEvent handlers
   • DActive Connectors
   • EPlaybooks
   • FIncident templates

   Show answer

   Answer: ACE

   Next question

3. Question 3 · 50 in bank

   Which statement about automation connectors on FortiAnalyzer is true?

   • AAn ADOM with the Fabric type comes with multiple connectors configured.
   • BThe local connector comes online once you have a playbook task referencing it.
   • CThe actions available with FortiOS connectors are determined by automation rules configured on FortiGate.
   • DThe playbook module must be enabled before external connectors are displayed.

   Show answer

   Answer: C

   Next question

4. Question 4 · 50 in bank

   Select 2

   Refer to the exhibit.

   

   Which two observations can you make after reviewing this log entry? (Choose two.)

   • AThis is a formatted view of the log.
   • BThis is a normalized log.
   • CThis log is in a raw log format.
   • DThis is the original log that FortiAnalyzer received from FortiGate.

   Show answer

   Answer: CD

   Next question

5. Question 5 · 50 in bank

   Refer to the exhibit.

   

   The playbook shown in the exhibit requires fine-tuning. A task needs to be configured to run a report on the updated asset list that the FortiAnalyzer receives from the FortiClient EMS. Which SOC role is responsible for making this change?

   • AThreat hunter
   • BSOC engineer
   • CSecurity analyst
   • DIncident responder

   Show answer

   Answer: B

   Next question

6. Question 6 · 50 in bank

   Which operation can you use SQL SELECT queries for?

   • ATo alter tables in the database
   • BTo purge log entries from the database
   • CTo insert new data into an existing table
   • DTo display the database schema

   Show answer

   Answer: D

   Next question

7. Question 7 · 50 in bank

   Refer to the exhibit.

   

   What does the data point at 21:20 indicate?

   • AFortiAnalyzer is indexing logs faster than logs are being received.
   • BThe sqlpugind daemon is behind in receiving logs by one log.
   • CThe fortilogd daemon is ahead in indexing by one log.
   • DThe log insert lag time is high.

   Show answer

   Answer: A

   Next question

8. Question 8 · 50 in bank

   Which statement describes archive logs on FortiAnalyzer?

   • ALogs that are parsed and normalized by FortiAnalyzer and available in the log view
   • BLogs received from other FortiAnalyzer devices
   • CLogs compressed and saved in files with the .gz extension
   • DLogs that are indexed and stored in the SQL database

   Show answer

   Answer: C

   Next question

9. Question 9 · 50 in bank

   Select 3

   Which three types of indicators can FortiAnalyzer identify? (Choose three.)

   • AEmail address
   • BHost name
   • CDomain
   • DURL
   • EIP address

   Show answer

   Answer: CDE

   Next question

10. Question 10 · 50 in bank

    You are trying to configure a task in the playbook editor to run a report. However, when you try to select the desired report you do not see it listed. What is the reason?

    • AThe report template needs to be switched to one that is available for playbooks.
    • BYou must create a trigger to run the report first.
    • CThe playbook is currently running and the report will be available after it is finished.
    • DThe report does not have auto-cache and extended log filtering enabled.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FAZ_AN-7.6 practice, question 1. 50 questions available.