السؤال #1

Which items must you configure on FortiAnalyzer to send its reports to an external server?

A. Report schedule

B. Mail server

C. Fabric connector

D. Output profilecorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #2

Which daemon is responsible for enforcing raw log file size?

A. logfiledcorrect

B. oftpd

C. sqlplugind

D. miglogd

عرض الإجابة

اجابة صحيحة: A

السؤال #3

Refer to the exhibit. The exhibit shows the creation of a new administrator on FortiAnalyzer. What are two effects of enabling the choice Match all users on remote server when configuring a new administrator? (Choose two.)

A. It allows user accounts in the LDAP server to use two-factor authentication

B. It creates a wildcard administrator using an LDAP server

C. User Remote-Admin from the LDAP server will be able to log in to FortiAnalyzer at any time

D. Administrators can log in to FortiAnalyzer using their credentials on the remote LDAP server

عرض الإجابة

اجابة صحيحة: BD

السؤال #4

Which two statements regarding ADOM modes are true? (Choose two.)

A. It provides network statistics for active connections, including the protocols, IP addresses, and connection states

B. It provides the complete routing table, including directly connected routes

C. It provides the static DNS table, including the host names and their expiration timers

D. It provides NTP server information, including server IPs

عرض الإجابة

اجابة صحيحة: CD

السؤال #5

Refer to the exhibit. What does the data point at 14:55 tell you?

A. The received rate is almost at its maximum for this device

B. The sqlplugind daemon is behind in log indexing by two logs

C. Logs are being dropped

D. Raw logs are reaching FortiAnalyzer faster than they can be indexedcorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #6

Refer to the exhibit. Which image corresponds to the packet capture shown in the exhibit? A) B) C)

A. Option Acorrect

B. Option B

C. Option C

عرض الإجابة

اجابة صحيحة: A

السؤال #7

If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

A. Hot swap the disk

B. Replace the disk and rebuild the RAID manually

C. Take no action if the RAID level supports a failed disk

D. Shut down FortiAnalyzer and replace the diskcorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #8

Why must you wait for several minutes before you run a playbook that you just created?

A. FortiAnalyzer needs that time to parse the new playbook

B. FortiAnalyzer needs that time to back up the current playbooks

C. FortiAnalyzer needs that time to ensure there are no other playbooks running

D. FortiAnalyzer needs that time to debug the new playbook

عرض الإجابة

اجابة صحيحة: B

السؤال #9

You finished registering a FortiGate device. After traffic starts to flow through FortiGate, you notice that only some of the logs expected are being received on FortiAnalyzer. What could be the reason for the logs not arriving on FortiAnalyzer?

A. FortiGate was added to the wrong ADOM type

B. This FortiGate model is not fully supported

C. FortiGate does not have logging configured correctly

D. This FortiGate is part of an HA cluster but it is the secondary device

عرض الإجابة

اجابة صحيحة: C

السؤال #10

You finished registering a FortiGate device. After traffic starts to flow through FortiGate, you notice that only some of the logs expected are being received on FortiAnalyzer. What could be the reason for the logs not arriving on FortiAnalyzer?

A. FortiGate was added to the wrong ADOM type

B. This FortiGate model is not fully supported

C. FortiGate does not have logging configured correctly

D. This FortiGate is part of an HA cluster but it is the secondary device

عرض الإجابة

اجابة صحيحة: C

السؤال #11

Which two statements are true regarding the outbreak detection service? (Choose two.)

A. New alerts are received by email

B. Outbreak alerts are available on the root ADOM only

C. An additional license is required

D. It automatically downloads new event handlers and reports

عرض الإجابة

اجابة صحيحة: CD

السؤال #12

The connection status of a new device on FortiAnalyzer is listed as Unauthorized. What does that status mean?

A. It is a device whose registration has not yet been accepted in FortiAnalvzer

B. It is a device that has not yet been assigned an ADOM

C. It is a device that is waiting for you to configure a pre - shared key

D. It is a device that FortiAnalvzer does not support

عرض الإجابة

اجابة صحيحة: A

السؤال #13

What is the purpose of a dataset query in FortiAnalyzer?

A. It sorts log data into tables

B. It extracts the database schema

C. It retrieves log data from the databasecorrect

D. It injects log data into the database

عرض الإجابة

اجابة صحيحة: C

السؤال #14

Which two elements are contained in a system backup created on FortiAnalyzer? (Choose two.)

A. Logs from registered devicescorrect

B. Database snapshot

C. Report informationcorrect

D. System informationcorrect

عرض الإجابة

اجابة صحيحة: ACD

السؤال #15

On the RAID management page, the disk status is listed as Initializing. What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

A. FortiAnalyzer is ensuring that the parity data of a redundant drive is valid

B. FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state

C. FortiAnalyzer is writing to all of its hard drives to make the array fault tolerantcorrect

D. FortiAnalyzer is functioning normally

عرض الإجابة

اجابة صحيحة: C

السؤال #16

What must you consider when using log fetching? (Choose two.)

A. The fetch client can retrieve logs from devices that are not added to its local Device Manager

B. You can use filters to include only logs from a single device

C. The fetching profile must include a user with the Super_User profile

D. The archive logs retrieved from the server become archive logs in the client

عرض الإجابة

اجابة صحيحة: BC

السؤال #17

Refer to the exhibit. Which image corresponds to the packet capture shown in the exhibit?

A.

B.

C.

D.

عرض الإجابة

اجابة صحيحة: A

السؤال #18

Which statement is true about using aggregation mode on FortiAnalyzer?

A. Aggregation mode supports log filters

B. Aggregation mode can work with syslog servers

C. In aggregation mode, logs and content files are forwarded in real time

D. Aggregation mode can be configured only on the CL

عرض الإجابة

اجابة صحيحة: C

السؤال #19

Refer to the exhibit. The exhibit shows the creation of a new administrator on FortiAnalyzer. The new account uses the credentials stored on an LDAP server. Why would an administrator configure a password for this account?

A. This password is used if the authentication server becomes unreachable

B. This password authenticates FortiAnalyzer aqainst the LDAP server

C. This password is set to comply with FortiAnalvzer password policy

D. This password is required because this is a restricted user

عرض الإجابة

اجابة صحيحة: A

السؤال #20

What are offline logs on FortiAnalyzer?

A. Compressed logs, also known as archive logs

B. Logs that are indexed and stored in the SQL database

C. Any logs collected from offline devices after they boot up

D. Real-time logs that are not yet indexed

عرض الإجابة

اجابة صحيحة: C

السؤال #21

What is the purpose of the FortiAnalyzer command diagnose system print netstat?

A. It provides network statistics for active connections, including the protocols, IP addresses, and connection states

B. It provides the complete routing table, including directly connected routes

C. It provides the static DNS table, including the host names and their expiration timers

D. It provides NTP server information, including server IPs

عرض الإجابة

اجابة صحيحة: A

السؤال #22

The connection status of a new device on FortiAnalyzer is listed as Unauthorized. What does that status mean?

A. It is a device whose registration has not yet been accepted in FortiAnalvzer

B. It is a device that has not yet been assigned an ADO

C. It is a device that is waiting for you to configure a pre-shared key

D. It is a device that FortiAnalvzer does not support

عرض الإجابة

اجابة صحيحة: A

السؤال #23

Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy. What is the most likely problem?

A. CPU resources are too high

B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

C. The total disk space is insufficient and you need to add other disk

D. The ADOM disk quota is set too low, based on log ratescorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #24

Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

A. FROMcorrect

B. LIMIT

C. WHERE

D. ORDER BY

عرض الإجابة

اجابة صحيحة: A

السؤال #25

What are analytics logs on FortiAnalyzer?

A. Logs that are compressed and saved to a log file

B. Logs that roll over when the log file reaches a specific size

C. Logs that are indexed and stored in the SQLcorrect

D. Logs classified as type Traffic, or type Security

عرض الإجابة

اجابة صحيحة: C

السؤال #26

Refer to the exhibit. Based on the output, what can you conclude about the FortiAnalyzer logging status?

A. The connection between FortiGate and FortiAnalyzer is overloaded

B. FortiGate has logs to send, but FortiAnalyzer is unavailable

C. FortiGate is configured to send logs in batches

D. FortiGate is sending logs again after it performed a reboot

عرض الإجابة

اجابة صحيحة: A

السؤال #27

Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

A. Antivirus logs

B. Web filter logscorrect

C. IPS logs

D. Application control logs

عرض الإجابة

اجابة صحيحة: B

السؤال #28

Which statement about the communication between FortiGate high availability (HA) clusters and FortiAnalyzer is true?

A. If devices were registered to FortiAnalyzer before forming a cluster, you can manually add them together

B. FortiAnalyzer distinguishes each cluster member by the IP addresses in log message headers

C. If the HA primary device becomes unavailable, you must remove it from the HA cluster list on FortiAnalyzer

D. The FortiGate HA cluster must be in active-passive mode in order to avoid conflict

عرض الإجابة

اجابة صحيحة: A

السؤال #29

You need to upgrade your FortiAnalyzer firmware. What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

A. FortiAnalyzer uses log fetching to retrieve the logs when back online

B. FortiGate uses the miglogd process to cache the logscorrect

C. The logfiled process stores logs in offline mode

D. Logs are dropped

عرض الإجابة

اجابة صحيحة: B

السؤال #30

You finished registering a FortiGate device. After traffic starts to flow through FortiGate. you notice that only some of the logs expected are being received on FortiAnalyzer. What could be the reason for the logs not arriving on FortiAnalyzer?

A. FortiGate does not have logging configured correctly

B. This FortiGate model is not fully supported

C. This FortiGate is part of an HA cluster but it is the secondary device

D. FortiGate was added to the wrong ADOM type

عرض الإجابة

اجابة صحيحة: A

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان