Trusted Fortinet FCP_FAZ_AN-7.4 Dumps (V8.02) – Pass Your Fortinet FCP – FortiAnalyzer 7.4 Analyst Exam and Boost Your Skills

1. Which statement about sending notifications with incident updates is true?

2. What can you do on FortiAnalyzer to restrict administrative access from specific locations?

3. You've moved a registered logging device out of one ADOM and into a new ADOM.

What happens when you rebuild the new ADOM database?

4. Which connector type is enabled by default to be used in playbooks?

5. Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?

6. Which two FortiAnalyzer features allow you to build a dataset and a chart automatically, based on a filtered search result? (Choose two.)

7. Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

8. Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

9. Which SQL query is in the correct order to query the database in the FortiAnalyzer?

10. Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

11. Which statement about the FortiSIEM management extension is correct?

12. View the exhibit.

What does the data point at 14:35 tell you?

13. What is the purpose of employing RAID with FortiAnalyzer?

14. What is the main purpose of deploying RAID with FortiAnalyzer?

15. In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

16. After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

execute sql-local rebuild-adom <new-ADOM-name>

17. For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

18. What must you consider when using log fetching? (Choose two.)

19. What happens when the IOC breach detection engine on FortiAnalyzer finds web logs that match a blocklisted IP address?

20. Which two statements are true regarding ADOM modes? (Choose two.)

21. When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search option.

What is a valid reason for using the Full Search option, instead?

22. What FortiGate process caches logs when FortiAnalyzer is not reachable?

23. Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

24. Refer to the exhibit.

Which statement is correct regarding the event displayed?

25. When you move a FortiGate device from one ADOM to a new ADOM, what is the purpose of rebuilding the new ADOM database?

26. What is the purpose of the following CLI command?

27. When working with FortiAnalyzer reports, what is the purpose of a dataset?

28. Refer to the exhibit.

Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1.

Which filter will achieve the desired result?

29. What types of logs will FortiAnalyzer store?

30. Which statements are correct regarding FortiAnalyzer reports? (Choose two)

31. What statements are true regarding disk log quota? (Choose two)

32. Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)

33. For which two purposes would you use the command set log checksum? (Choose two.)

34. How does FortiAnalyzer retrieve specific log data from the database?

35. Which statement is true when you are upgrading the firmware on an HA cluster made up of two FortiAnalyzer devices?

36. What is the purpose of output variables?

37. What allows one task to use the output of a previous task as its input?

38. Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy.

What is the most likely problem?

39. What statements are true regarding FortiAnalyzer's treatment of high availability (HA) dusters? (Choose two)

40. Which log will generate an event with the status Contained?

41. What is included in the disk quota for each ADOM on the FortiAnalyzer?

42. What are analytics logs on FortiAnalyzer?

43. Refer to the exhibit.

Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than “admin" and coming from Laptop1.

Which filter will achieve the desired result?

44. Consider the CLI command:

What is the purpose of the command?

45. What two things should an administrator do to view Compromised Hosts on FortiAnalyzer? (Choose two.)

46. What database language does FortiAnalyzer use for logging and reporting?

47. An administrator has configured the following settings:

config system global

set log-checksum md5-auth

end

What is the significance of executing this command?

48. What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

49. You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.

What does the disk quota refer to?

50. Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

51. You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.

What is the recommended method to replace the disk?

52. Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

53. Which two statements about log forwarding are true? (Choose two.)

54. Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

55. Which database language does FortiAnalyzer support for the purposes of logging and reporting?

56. What are two benefits of using fabric connectors? (Choose two.)

57. For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

58. Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

59. Which statement describes a dataset in FortiAnalyzer?

60. A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.

What can you do on FortiAnalyzer to accomplish this?