FCP_FAZ_AN-7.6 practice questions 11–20

1. Question 11 · 50 in bank

   Select 2

   An analyst needs to move reports between two ADOMs. Which two statements are true? (Choose two.)

   • AAll charts and datasets associated with the report will be imported together.
   • BThe date and time will be appended to the original report name to avoid conflicts.
   • CThe ADOMs must be compatible types.
   • DThe reports must be converted into templates first.

   Show answer

   Answer: AC

   Next question

2. Question 12 · 50 in bank

   When managing incidents on FortiAnalyzer, which fact must an analyst be aware of?

   • AThe status of the incident is always linked to the status of the attached event.
   • BA playbook can be run from the Incidents page.
   • CIncidents must be acknowledged before they can be analyzed.
   • DIndicators found on the Incidents page can be enriched only from the Indicators page.

   Show answer

   Answer: B

   Next question

3. Question 13 · 50 in bank

   Refer to the exhibit.

   

   What can you conclude from this output?

   • AThe allocated disk quota to ADOM1 is 3 GB.
   • BThere is no disk quota allocated to quarantining files.
   • CArchive logs are using more space than analytic logs.
   • DADOM1 has 300 MB of disk space remaining.

   Show answer

   Answer: A

   Next question

4. Question 14 · 50 in bank

   Select 2

   Refer to the exhibit.

   

   Which two conclusions can you make about these search results? (Choose two.)

   • AThe logs have been parsed by FortiGate log parser.
   • BThey were searched using text mode.
   • CThey are sortable by columns and customizable.
   • DThey can be downloaded to a CSV file.

   Show answer

   Answer: BD

   Next question

5. Question 15 · 50 in bank

   Select 2

   What are the two methods you can use to send notifications when an event is generated by an event handler? (Choose two.)

   • ASend an alert through the FortiGuard server.
   • BSend an alert through Fabric connectors.
   • CSend SMS notification.
   • DSend SNMP trap.

   Show answer

   Answer: BD

   Next question

6. Question 16 · 50 in bank

   You created a playbook on FortiAnalyzer that uses a FortiOS connector. When you configure FortiGate, which type of trigger must you use so that the actions in an automation stitch are available in the FortiOS connector?

   • AFabric Connector event
   • BIncoming webhook
   • CIP ban
   • DFortiAnalyzer Event Handler

   Show answer

   Answer: B

   Next question

7. Question 17 · 50 in bank

   Select 2

   Which two actions should you take to view compromised hosts on FortiAnalyzer? (Choose two.)

   • AEnable device detection on FortiGate devices that are sending logs to FortiAnalyzer.
   • BEnable web filtering in firewall policies on FortiGate devices, and make sure the FortiGate logs are sent to FortiAnalyzer.
   • CSubscribe FortiAnalyzer to FortiGuard to keep its local threat database up to date.
   • DSubscribe to the Outbreak Detection Service so that the FortiAnalyzer has the latest event handlers.

   Show answer

   Answer: BC

   Next question

8. Question 18 · 50 in bank

   Refer to the exhibit.

   

   What does the orange status indicator on the FortiGuard Connector indicate?

   • AThe connection is down.
   • BThe connection is successful.
   • CThe connection is unknown.
   • DThe connection is disconnected.

   Show answer

   Answer: C

   Next question

9. Question 19 · 50 in bank

   Select 3

   Which three types of traffic does the safeguarding event handler scan? (Choose three.)

   • AWeb
   • BApplication
   • CVoIP
   • DEmail
   • EDNS

   Show answer

   Answer: ABD

   Next question

10. Question 20 · 50 in bank

    In your role as an analyst, you frequently search the log view using the same parameters. Instead of defining the same search filters repeatedly, what can you do to save time?

    • AConfigure a custom dashboard.
    • BConfigure a chart template and apply it to device groups.
    • CConfigure a report template.
    • DConfigure a custom view.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FAZ_AN-7.6 practice, question 11. 50 questions available.