Get Fortinet FCP_FAZ_AD-7.4 Dumps (V11.03) – Prepare for Your FCP – FortiAnalyzer 7.4 Administrator Exam with the Latest Materials

1. Which two statements regarding ADOM modes are true? (Choose two.)

2. What is the purpose of the FortiAnalyzer command diagnose system print netstat?

3. Refer to the exhibit.

The exhibit shows the creation of a new administrator on FortiAnalyzer.

What are two effects of enabling the choice Match all users on remote server when configuring a new administrator? (Choose two.)

4. The connection status of a new device on FortiAnalyzer is listed as Unauthorized.

What does that status mean?

5. Refer to the exhibit.

Which image corresponds to the packet capture shown in the exhibit?

A)

B)

C)

D)

6. Refer to the exhibit.

What is the purpose of configuring FortiAnalyzer with the settings displayed in the image?

7. What are offline logs on FortiAnalyzer?

8. Which two elements are contained in a system backup created on FortiAnalyzer? (Choose two.)

9. Refer to the exhibit.

Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?

10. You finished registering a FortiGate device. After traffic starts to flow through FortiGate, you notice that only some of the logs expected are being received on FortiAnalyzer.

What could be the reason for the logs not arriving on FortiAnalyzer?

11. An administrator, fortinet, can view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mail server that can be used to send alert emails.

What can be the problem?

12. Which two parameters are used to calculate the Total Quota value available on FortiAnalyzer? (Choose two.)

13. Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate on FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

14. An administrator has moved a FortiGate device from the root ADOM to ADOM1.

Which two statements are true regarding logs? (Choose two.)

15. Which statement about the communication between FortiGate high availability (HA) clusters and FortiAnalyzer is true?

16. What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

17. An administrator has configured the following settings:

What is the purpose of executing these commands?

18. Which statement correctly describes RAID 10 (1+0) on FortiAnalyzer?

19. Refer to the exhibit, which shows the HA configuration settings of a FortiAnalyzer device.

The administrator wants to join this FortiAnalyzer to an existing HA cluster.

What can you conclude from the configuration displayed?

20. Which two parameters impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

21. Refer to the exhibit.

The exhibit shows the creation of a new administrator on FortiAnalyzer. The new account uses the credentials stored on an LDAP server.

Why would an administrator configure a password for this account?

22. In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?

23. Which two statements about high availability (HA) on FortiAnalyzer are true? (Choose two.)

24. Which two statements about deleting ADOMs are true? (Choose two.)

25. Refer to the exhibit.

The capture displayed was taken on a FortiAnalyzer.

Why is a single IP address shown as the source for all logs received?

26. What does the disk status Degraded mean for RAID management?

27. Which process is responsible for enforcing the log file size?

28. Which two statements about FortiAnalyzer operating modes are true? (Choose two.)

29. Which two statements regarding FortiAnalyzer log forwarding modes are true? (Choose two.)

30. You are trying to initiate an authorization request from FortiGate to FortiAnalyzer, but the Security Fabric window does not open when you click Authorize.

Which two reasons can cause this to happen? (Choose two.)

31. Which two methods can you use to restrict administrative access on FortiAnalyzer? (Choose two.)

32. Which statement when you are upgrading the firmware on an HA cluster made up of three FortiAnalyzer devices is true?

33. What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

34. Which three RAID configurations provide fault tolerance on FortiAnalyzer? (Choose three.)

35. Refer to the exhibit.

Based on the output, what can you conclude about the FortiAnalyzer logging status?

36. Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

37. Which daemon is responsible for enforcing raw log file size?

38. An administrator has configured the following settings:

config system global

set log-checksum md5-auth

end

What is the significance of executing this command?

39. Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)

40. For which two purposes would you use the command set log checksum? (Choose two.)

41. Refer to the exhibit.

What does the data point at 14:55 tell you?

42. You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.

What is the recommended method to replace the disk?

43. On the RAID management page, the disk status is listed as Initializing.

What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

44. In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

45. You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.

What does the disk quota refer to?

46. Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

47. You need to upgrade your FortiAnalyzer firmware.

What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

48. After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

execute sql-local rebuild-adom <new-ADOM-name>

49. If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

50. If you upgrade the FortiAnalyzer firmware, which report element can be affected?

51. FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.

What is the most likely problem?

52. Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

53. Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

54. When you perform a system backup, what does the backup configuration contain? (Choose two.)

55. Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

56. What is the purpose of a dataset query in FortiAnalyzer?

57. Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.

What is the most likely problem?

58. Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

59. View the exhibit:

What does the 1000MB maximum for disk utilization refer to?

60. You’ve moved a registered logging device out of one ADOM and into a new ADOM.

What happens when you rebuild the new ADOM database?