Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: xmas50

Fortinet FCP_FAZ_AD-7.4 - FCP - FortiAnalyzer 7.4 Administrator

Fortinet FCP_FAZ_AD-7.4 Premium Access     Download Demo    
Page: 2 / 6
Total 178 questions

Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

A.

Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated.

B.

Must establish an IPsec tunnel ID and pre-shared key.

C.

IPsec cannot be enabled if SSL is enabled as well.

D.

IPsec is only enabled through the CLI on FortiAnalyzer.

Which statement correctly describes RAID 10 (1+0) on FortiAnalyzer?

A.

A configuration with four disks, each with 2 TB of capacity, provides a total space of 4 TB.

B It combines mirroring striping and distributed parity to provide performance and fault tolerance

B.

A configuration with four disks, each with 2 TB of capacity, provides a total space of 2 TB.

C.

It uses striping to provide performance and fault tolerance.

On FortiAnalyzer, what is a wildcard administrator account?

A.

An account that permits access to members of an LDAP group

B.

An account that allows guest access with read-only privileges

C.

An account that requires two-factor authentication

D.

An account that validates against any user account on a FortiAuthenticator

What is the purpose of using prefilters when configuring event handlers?

A.

They limit which logs are checked for matches by the other filters.

B.

They can filter the logs before they are processed by FortiAnalyzer

C.

They download new filters to be used in event handlers.

D.

They are common filters applied simultaneously to all event handlers.

Which statement regarding the FortiAnalyzer Fabric is true?

A.

The Fabric supervisor collects logs from the Fabric members.

B.

Logging devices can register to the Fabric supervisor or to Fabric members.

C.

Fabric members support HA.

D.

Administrators can create new incidents from the Fabric supervisor.

Which statement is true regarding Macros on FortiAnalyzer?

A.

Macros are ADOM specific and each ADOM will have unique macros relevant to that ADOM.

B.

Macros are supported only on the FortiGate ADOM.

C.

Macros are useful in generating excel log files automatically based on the reports settings.

D.

Macros are predefined templates for reports and cannot be customized.

Refer to the exhibit.

The exhibit shows the creation of a new administrator on FortiAnalyzer. The new account uses the credentials stored on an LDAP server.

Why would an administrator configure a password for this account?

A.

This password is used if the authentication server becomes unreachable.

B.

This password authenticates FortiAnalyzer aqainst the LDAP server.

C.

This password is set to comply with FortiAnalvzer password policy

D.

This password is required because this is a restricted user.

How does FortiAnalyzer retrieve specific log data from the database?

A.

SQL FROM statement

B.

SQL GET statement

C.

SQL SELECT statement

D.

SQL EXTRACT statement

Why must you wait for several minutes before you run a playbook that you just created?

A.

FortiAnalyzer needs that time to parse the new playbook.

B.

FortiAnalyzer needs that time to back up the current playbooks.

C.

FortiAnalyzer needs that time to ensure there are no other playbooks running.

D.

FortiAnalyzer needs that time to debug the new playbook.

What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

A.

There is no need to do anything because the disk will self-recover.

B.

Run execute format disk to format and restart the FortiAnalyzer device.

C.

Perform a hot swap of the disk.

D.

Shut down FortiAnalyzer and replace the disk.