FCP_FAZ_AN-7.6 practice questions 41–50

1. Question 41 · 50 in bank

   Which statement correctly describes one difference between templates and reports?

   • AReports can be moved between ADOMs but templates cannot.
   • BTemplates can be cloned, but reports cannot be cloned.
   • CTemplates do not include advanced report settings, but reports do.
   • DReports support macros but templates do not.

   Show answer

   Answer: C

   Next question

2. Question 42 · 50 in bank

   In firmware version 7.6, how does on-premises FortiAnalyzer store logs?

   • AUses ClickHouse database
   • BUses Postgres SQL database
   • CUses MySQL database
   • DUses ElasticSearch database

   Show answer

   Answer: A

   Next question

3. Question 43 · 50 in bank

   Select 2

   Which three tasks can be performed on FortiAnalyzer using FortiAI? (Choose three.)

   • AIdentify potential impacts and recommended remediation.
   • BPerform threat hunting.
   • CConfigure SD-WAN overlay using FortiAI
   • DConfigure site-to-site VPN using FortiAI

   Show answer

   Answer: AB

   Next question

4. Question 44 · 50 in bank

   Refer to the exhibit.

   

   An analyst is trying to create a dataset to pull all gambling websites that were visited by end users. Which SQL query on FortiAnalyzer will give the result shown in the exhibit?

   • Aselect srcip as “SourceIP”, dstip as “DestIP”, url from $log where catdesc = ‘Dating’
   • Bselect srcip as “SourceIP”, dstip as “DestIP”, url from ‘Gambling’ where catdesc = $log
   • Cselect srcip as “SourceIPv6”, dstip as “DestIPv6”, url from $log where catdesc = ‘Gambling’
   • Dselect srcip as “SourceIP”, dstip as “DestIP”, url from $log where catdesc = ‘Gambling’

   Show answer

   Answer: D

   Next question

5. Question 45 · 50 in bank

   Refer to the exhibit.

   

   What conclusion can you draw from the exhibit?

   • AUnrated websites are being blocked.
   • BSocial networking websites are being allowed.
   • CThese are application control logs from FortiGate.
   • DThis is a custom view that was set by the analyst.

   Show answer

   Answer: B

   Next question

6. Question 46 · 50 in bank

   Refer to the exhibit.

   

   Which statement about the displayed event is correct?

   • AAn incident was created from this event.
   • BThe security event risk is considered open.
   • CThe security risk was escalated.
   • DThe risk source is isolated.

   Show answer

   Answer: B

   Next question

7. Question 47 · 50 in bank

   Select 2

   Which two statements about playbook execution are true? (Choose two.)

   • AFortiAnalyzer will commit changes made by a Failed playbook.
   • BYou can run the default debugging playbook to investigate playbook errors.
   • CThe Playbook Monitor provides troubleshooting logs.
   • DIf the playbook status is Failed, all individual tasks in the playbook will fail.

   Show answer

   Answer: AC

   Next question

8. Question 48 · 50 in bank

   Select 3

   Which three types of logs does FortiAnalyzer collect from FortiGate devices for normalization? (Choose three.)

   • ASystem
   • BTraffic
   • CEvent
   • DSecurity
   • EFirewall

   Show answer

   Answer: BCD

   Next question

9. Question 49 · 50 in bank

   An administrator on your team has configured multiple reports to run periodically. Management has requested that all new generated reports be sent to a company email inbox for accessibility. The mail server has already been configured on FortiAnalyzer. Which item must you configure on FortiAnalyzer so that emails are sent when the reports are generated?

   • AEnable an output profile on the reports.
   • BEnable the option to email all reports under the mail server.
   • CConfigure a new data policy for log uploads to email.
   • DConfigure the email notifications section under the report calendar.

   Show answer

   Answer: A

   Next question

10. Question 50 · 50 in bank

    Select 2

    Which two modules can be imported and exported between ADOMs on FortiAnalyzer? (Choose two.)

    • AReports
    • BTemplates
    • CDatasets
    • DCharts

    Show answer

    Answer: AD

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FAZ_AN-7.6 practice, question 41. 50 questions available.