FCP_FAZ_AN-7.6 시험 - Fortinet실제시험문제와 답 - 194문항

Question No : 1

FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

A.To upload logs to an SFTP server
B.To send an identical set of logs to a second logging server
C.To encrypt log communication between devices
D.To prevent log modification during backup

정답:

Question No : 2

Which two external servers can you configure to validate administrator logins? (Choose two.)

A.Syslog
B.LDAP
C.RADIUS
D.Only locally by FortiAnalyzer

정답:

Question No : 3

Refer to the exhibit.

The image displays the configuration of a FortiAnalyzer the administrator wants to join to an existing HA cluster.
What can you conclude from the configuration displayed?

A.This FortiAnalyzer will join to the existing HA cluster as the primary.
B.This FortiAnalyzer is configured to receive logs in its port1.
C.This FortiAnalyzer will trigger a failover after losing communication with its peers for 10 seconds.
D.After joining to the cluster, this FortiAnalyzer will keep an updated log database.

정답:

Question No : 4

Which two FortiAnalyzer features allow you to automatically build a dataset and chart based on a filtered search result? (Choose two.)

A.Export to Report Chart (FortiView)
B.Custom View
C.Dataset Library
D.Chart Builder

정답:

Question No : 5

When generating reports on FortiAnalyzer, macros can be used to include additional data.
Which two statements about macros are true? (Choose two.)

A.Macros are abbreviated dataset queries
B.Macros do not need to be associated with a chart
C.Macros are supported in FortiGate ADOMs only
D.Macros cannot be customized

정답:

Question No : 6

What is Log Insert Lag Time on FortiAnalyzer?

A.The number of times in the logs where end users experienced slowness while accessing resources.
B.The amount of lag time that occurs when the administrator is rebuilding the ADOM database.
C.The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.
D.The amount of time FortiAnalyzer takes to receive logs from a registered device

정답:

Question No : 7

Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

A.In aggregation mode, you can forward logs to syslog and CEF servers as well.
B.Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.
C.Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.
D.Both modes, forwarding and aggregation, support encryption of logs between devices.

정답:

Question No : 8

Which statement is true about sending notifications with incident updates?

A.You can send notifications to multiple external platforms.
B.If you use multiple fabric connectors, all connectors must have the same notification settings.
C.Notifications can be sent only by email.
D.Notifications can be sent only when an incident is updated or deleted.

정답:

Question No : 9

What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

A.Mail server
B.SFTP, FTP, or SCP server
C.Report scheduling
D.Output profile

정답:

Question No : 10

What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

A.Disk logging is enabled on the FortiGate through the CLI only.
B.Disk logging is enabled by default on the FortiGate.
C.Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.
D.Both secure communications methods (SSL and IPsec) allow the store and upload option.
E.All FortiGates can send logs to FortiAnalyzer using the store and upload option.

정답:

Question No : 11

On FortiAnalyzer, what is a wildcard administrator account?

A.An account that permits access to members of an LDAP group
B.An account that allows guest access with read-only privileges
C.An account that requires two-factor authentication
D.An account that validates against any user account on a FortiAuthenticator

정답:

Question No : 12

Which two remote servers are supported for the upload of FortiAnalyzer local logs? (Choose two.)

A.FTP
B.SFTP
C.UDP
D.TCP

정답:

Question No : 13

How do you restrict an administrator's access to a subset of your organization's ADOMs?

A.Set the ADOM mode to Advanced
B.Assign the ADOMs to the administrator's account
C.Configure trusted hosts
D.Assign the default Super_User administrator profile

정답:

Question No : 14

Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

A.IPsec is only enabled through the CLI on FortiAnalyzer.
B.Must establish an IPsec tunnel ID and pre-shared key.
C.Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated.
D.IPsec cannot be enabled if SSL is enabled as well.

정답:

Question No : 15

Which two statements are true regarding fabric connectors? (Choose two.)

A.Storage connector service does not require a separate license to send logs to cloud platform.
B.Cloud-Out connections allow you to send real-time logs to pubic cloud accounts like Amazon S3, Azure Blob, and Google Cloud.
C.Fabric connectors allow to save storage costs and improve redundancy.
D.Configuring fabric connectors to send notification to ITSM platform upon incident creation Is more efficient than third-party information from the FortiAnalyzer AP

정답:

Fortinet FCP_FAZ_AN-7.6 시험