FCP_FAZ_AD-7.4 Pre-Exam Practice Tests | (Updated 185 Questions)
Valid FCP_FAZ_AD-7.4 Exam Q&A PDF - One Year Free Update
Fortinet FCP_FAZ_AD-7.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 17
Refer to the exhibit.
What does the data point at 14:55 tell you?
- A. The sqlplugind daemon is behind in log indexing by two logs
- B. Logs are being dropped
- C. The received rate is almost at its maximum for this device
- D. Raw logs are reaching FortiAnalyzer faster than they can be indexed
Answer: D
NEW QUESTION # 18
Which fact must you consider after you enable auto-cache for reports?
- A. Larger reports may consume excessive system resources.
- B. Generating multiple reports simultaneously may cause data corruption.
- C. You must rebuild the SQL database for the change to take effect.
- D. You must choose a report type that supports this feature.
Answer: A
NEW QUESTION # 19
Which statement about the FortiSIEM management extension is correct?
- A. It requires a licensed FortiSIEM supervisor.
- B. It can be installed as a dedicated VM.
- C. Its use of the available disk space is capped at 50%.
- D. Allows you to manage the entire life cycle of a threat or breach.
Answer: A
Explanation:
MEA - Administration Guide, FortiSIEM 6.7.5
To run the FortiSIEM Collector management extension application, the following requirements must be met:
FortiAnalyzer 7.0.1 or above
FortiSIEM Supervisor, Worker, Collectors 6.3.0 or above.
FortiSIEM Linux Agent 6.3.0 or above.
FortiSIEM Windows Agent 4.1.2 or above.
NEW QUESTION # 20
FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.
What is the most likely problem?
- A. Disk utilization for archive logs is set for 15 days
- B. CPU resources are too high
- C. Logs are rolling before the report is run
- D. Quota enforcement is acting on analytical data before a report is complete
Answer: C
NEW QUESTION # 21
In Log View, you can use the Chart Builder feature to build a dataset and chart based on the filtered search results.
Similarly, which feature you can use for FortiView?
- A. Export to Custom Chart
- B. Export to Report Chart
- C. Export to Chart Builder
- D. Export to PDF
Answer: B
Explanation:
Reference:
Similar to the Chart Builder feature in Log View, you can export a chart from a FortiView. The chart export includes any filters you set on the FortiView. FortiAnalyzer_7.0_Study_Guide-Online pag. 292.
NEW QUESTION # 22
What is true about FortiAnalyzer reports?
- A. When you enable auto-cache, reports are scheduled by default.
- B. The reports from one ADOM are available for all ADOMs.
- C. Reports can be saved in a CSV format.
- D. You require an output profile before reports are generated.
Answer: D
Explanation:
FortiAnalyzer allows you to export reports to a variety of formats, including CSV (comma-separated values) format, which is useful for situations that require further analysis of data in spreadsheet software.
NEW QUESTION # 23
Which process is responsible for enforcing the log file size?
- A. sqlplugind
- B. oftpd
- C. logfiled
- D. miglogd
Answer: C
NEW QUESTION # 24
Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.
What is the most likely problem?
- A. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device
- B. The total disk space is insufficient and you need to add other disk
- C. The ADOM disk quota is set too low, based on log rates
- D. CPU resources are too high
Answer: C
Explanation:
Reference:
20logs.htm
NEW QUESTION # 25
After generating a report, you notice the information you were expecting to see is not included in it. What are two possible reasons for this scenario? (Choose two.)
- A. The logfiled service has not indexed all the expected logs.
- B. The time frame selected in the report is wrong.
- C. The logs were overwritten by the data retention policy.
- D. You enabled auto-cache with extended log filtering.
Answer: A,C
NEW QUESTION # 26
Which statement is true about sending notifications with incident updates?
- A. If you use multiple fabric connectors, all connectors must have the same notification settings
- B. Notifications can be sent only when an incident is updated or deleted.
- C. Notifications can be sent only by email.
- D. You can send notifications to multiple external platforms
Answer: D
Explanation:
You can add more than one fabric connector, each with the same or different notification settings. The receiving side of the connector must be configured for the notifications to be sent successfully.
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 34: Fabric connectors also enable FortiAnalyzer to send notifications to ITSM platforms when a new incident is created or for any subsequent updates.
NEW QUESTION # 27
Refer to the exhibit.
Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?
- A. FortiAnalyzer1 and FortiAnalyzer3
- B. FortiAnalyzer2 and FortiAnalyzer3
- C. FortiAnalyzer1 and FortiAnalyzer2
- D. All devices listed can be members.
Answer: C
Explanation:
Based on the partial configuration output, the primary factor for determining which devices can be members of a FortiAnalyzer Fabric is the log-mode setting. Devices with the same log mode can be part of the same FortiAnalyzer Fabric.
FortiAnalyzer1: Log mode is set to collector.
FortiAnalyzer2: Log mode is set to collector.
FortiAnalyzer3: Log mode is set to analyzer.
Devices with the same log mode can be part of the same fabric. Since FortiAnalyzer1 and FortiAnalyzer2 both have their log modes set to collector, they can be members of a FortiAnalyzer Fabric.
Therefore, the correct answer is FortiAnalyzer1 and FortiAnalyzer2.
NEW QUESTION # 28
An administrator has configured the following settings:
What is the purpose of executing these commands?
- A. To create the secure channel used by the OFTP process.
- B. To record the hash value and authentication code of log files.
- C. To verify the integrity of the log files received.
- D. To encrypt log transfer between FortiAnalyzer and other devices.
Answer: B
Explanation:
The command set log-checksum md5-auth configures FortiAnalyzer to generate an MD5 hash for each log file, along with an authentication code. This ensures that the integrity of the logs can be verified, confirming that the logs have not been tampered with.
NEW QUESTION # 29
You crested a playbook on FortiAnalyzer that uses a FortiOS connector
When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stitch are available in the FortiOS connector?
- A. Incoming webhook
- B. FortiAnalyzer Event Handler
- C. FortiOS Event Log
- D. Fabric Connector event
Answer: C
Explanation:
"One possible scenario is shown on the slide:
1. Traffic flows through the FortiGate
2. FortiGate sends logs to FortiAnalyzer
3. FortiAnalyzer detects some suspicious traffic and generates an event
4. The event triggers the execution of a playbook in FortiAnalyzer, which sends a webhook call to FortiGate so that it runs an automation stitch
5. FortiGate runs the automation stitch with the corrective or preventive actions" FortiAnalyzer_7.0_Study_Guide-Online page 228 In order to see the actions related to the FOS connector, you must enable an automation rule using the Incoming Webhook Call trigger on the FortiGate side. FortiAnalyzer_7.0_Study Guide page no 233
NEW QUESTION # 30
Which two methods can you use to restrict administrative access on FortiAnalyzer? (Choose two.)
- A. Fabric connectors to external LDAP servers.
- B. Use administrator profiles.
- C. Limit access to specific virtual domains.
- D. Configure trusted hosts.
Answer: B,D
Explanation:
To restrict administrative access on FortiAnalyzer, two effective methods are using administrator profiles and configuring trusted hosts. Administrator profiles allow for defining the level of access and permissions for different administrators, controlling what each administrator can see and do within the FortiAnalyzer unit. Configuring trusted hosts enhances security by limiting administrative access to specified IP addresses, ensuring that administrators can only connect from approved locations or networks, thus preventing unauthorized access from outside specified subnets or IP addresses.
Reference: FortiAnalyzer 7.4.1 Administration Guide, "Administrators" and "Trusted hosts" sections.
NEW QUESTION # 31
What is true about a FortiAnalyzer Fabric?
- A. The supervisor and members cannot be in different time zones
- B. Supervisors support HA.
- C. The members send their logs to the supervisor.
- D. Members events can be raised from the supervisor.
Answer: C
Explanation:
In a FortiAnalyzer Fabric, the FortiAnalyzer can recognize a Security Fabric group of devices, and it supports the Security Fabric by storing and analyzing logs from these units as if they were from a single device. The members of the Security Fabric group send their logs to the FortiAnalyzer, which acts as a supervisor for log storage and analysis, providing a centralized point of visibility and control over the logs.
Reference: FortiAnalyzer 7.4.1 Administration Guide, "Security Fabric" section.
NEW QUESTION # 32
......
FCP - FortiAnalyzer 7.4 Administrator Free Update Certification Sample Questions: https://www.real4prep.com/FCP_FAZ_AD-7.4-exam.html
Trend for Fortinet FCP_FAZ_AD-7.4 pdf dumps before actual exam: https://drive.google.com/open?id=1Nos_eNXGnTtNSK2veUl30OH6PGRngkbO