السؤال #1

Which FortiAnalyzer featu hich statement regarding macros oach when managing your network security?

A. FortiView Monitor

B. Threat huntingcorrect

C. Incidents dashboards

D. Outbreak alert services

عرض الإجابة

اجابة صحيحة: B

السؤال #2

What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

A. Log correlationcorrect

B. Host name resolution

C. Log collection

D. Real-time forwarding

عرض الإجابة

اجابة صحيحة: A

السؤال #3

What can you do on FortiAnalyzer to restrict administrative access from specific locations?

A. Configure trusted hosts for that administrator

B. Enable geo-location services on accessible interface

C. Configure two-factor authentication with a remote RADIUS server

D. Configure an ADOM for respective location

عرض الإجابة

اجابة صحيحة: A

السؤال #4

Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?

A. FortiView Monitor

B. Threat huntingcorrect

C. Incidents dashboards

D. Outbreak alert services

عرض الإجابة

اجابة صحيحة: B

السؤال #5

Which statement about sending notifications with incident update is true?

A. You can send notifications to multiple external platforms

B. Notifications can be sent only by email

C. If you use multiple fabric connectors, all connectors must have the same settings

D. Notifications can be sent only when an incident is updated or deleted

عرض الإجابة

اجابة صحيحة: A

السؤال #6

What is included in the disk quota for each ADOM on the FortiAnalyzer?

A. SQL tables and archive files

B. Raw logs and archive files

C. Archive logs and analytics logscorrect

D. Raw logs, archive files, SQL database tables

عرض الإجابة

اجابة صحيحة: C

السؤال #7

You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used. What does the disk quota refer to?

A. The maximum disk utilization for each device in the ADOM

B. The maximum disk utilization for the FortiAnalyzer model

C. The maximum disk utilization for the ADOM type

D. The maximum disk utilization for all devices in the ADOMcorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #8

Which two statements are true regarding ADOM modes? (Choose two.)

A. You can only change ADOM modes through CLcorrect

B. In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADO

C. In an advanced mode ADOM, you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs

D. Normal mode is the default ADOM mode

عرض الإجابة

اجابة صحيحة: ACD

السؤال #9

Refer to the exhibit. Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than “admin" and coming from Laptop1. Which filter will achieve the desired result?

A. operation-login & performed_on=="GUI(10

B. operation-login & srcip==10

C. operation-login & dstip==10

D. operation-login & performed_on=="GUI(10

عرض الإجابة

اجابة صحيحة: A

السؤال #10

Refer to the exhibit. Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than “admin" and coming from Laptop1. Which filter will achieve the desired result?

A. operation-login & performed_on=="GUI(10

B. operation-login & srcip==10

C. operation-login & dstip==10

D. operation-login & performed_on=="GUI(10

عرض الإجابة

اجابة صحيحة: A

السؤال #11

Which connector type is enabled by default to be used in playbooks?

A. Fabric

B. EMS

C. Local connectorcorrect

D. FortiOS

عرض الإجابة

اجابة صحيحة: C

السؤال #12

Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

A. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version

B. Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy

C. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end

D. Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device

عرض الإجابة

اجابة صحيحة: AD

السؤال #13

After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command? execute sql-local rebuild-adom

A. To reset the disk quota enforcement to default

B. To remove the analytics logs of the device from the old database

C. To migrate the archive logs to the new ADOM

D. To populate the new ADOM with analytical logs for the moved device, so you can run reportscorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #14

Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

A. To properly correlate logscorrect

B. To use real-time forwarding

C. To resolve host names

D. To improve DNS response times

عرض الإجابة

اجابة صحيحة: A

السؤال #15

Which connector type is enabled by default to be used in playbooks?

A. Fabric

B. EMS

C. Local connectorcorrect

D. FortiOS

عرض الإجابة

اجابة صحيحة: C

السؤال #16

Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?

A. FortiView Monitor

B. Outbreak alert services

C. Incidents dashboard

D. Threat hunting

عرض الإجابة

اجابة صحيحة: D

السؤال #17

What statements are true regarding disk log quota? (Choose two)

A. The FortiAnalyzer stops logging once the disk log quota is met

B. The FortiAnalyzer automatically sets the disk log quota based on the device

C. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met

D. The FortiAnalyzer disk log quota is configurable, but has a minimum 100mb a maximum based on the reserved system space

عرض الإجابة

اجابة صحيحة: ACD

السؤال #18

A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer. What can you do on FortiAnalyzer to accomplish this?

A. Click Task Monitor and view the tasks performed by that administrator

B. Click Fabric View and view the tasks performed by the rogue administrator

C. Click Log View and generate a report for that administrator

D. Click FortiView and generate a report for that administrator

عرض الإجابة

اجابة صحيحة: A

السؤال #19

Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

A. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version

B. Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy

C. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end

D. Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device

عرض الإجابة

اجابة صحيحة: AD

السؤال #20

View the exhibit. What does the data point at 14:35 tell you?

A. FortiAnalyzer is dropping logs

B. The sqlplugind daemon is ahead in indexing by one log

C. FortiAnalyzer has temporarily stopped receiving logs so older logs' can be indexed

D. FortiAnalyzer is indexing logs faster than logs are being received

عرض الإجابة

اجابة صحيحة: B

السؤال #21

What FortiGate process caches logs when FortiAnalyzer is not reachable?

A. miglogdcorrect

B. oftpd

C. logfiled

D. sqlplugind

عرض الإجابة

اجابة صحيحة: A

السؤال #22

What statements are true regarding FortiAnalyzer's treatment of high availability (HA) dusters? (Choose two)

A. FortiAnalyzer distinguishes different devices by their serial number

B. FortiAnalyzer only needs to know the serial number of the primary device in the cluster-it automaticaly discovers the other devices

C. FortiAnalyzer receives bgs only from the primary device in the cluster

D. FortiAnalyzer receives logs from the devices in a cluster

عرض الإجابة

اجابة صحيحة: AD

السؤال #23

What are two benefits of using fabric connectors? (Choose two.)

A. They allow FortiAnalyzer to send logs in real-time to public cloud accounts

B. You do not need an additional license to send logs to the cloud platform

C. Fabric connectors allow you to improve redundancy

D. Using fabric connectors is more efficient than using third-party polling with AP

عرض الإجابة

اجابة صحيحة: AC

السؤال #24

Which two statement regarding the outbreak detection service are true? (Choose two.)

A. An additional license is required

B. It automatically downloads new event handlers and reports

C. Outbreak alerts are available on the root ADOM only

D. New alerts are received by email

عرض الإجابة

اجابة صحيحة: BC

السؤال #25

Which statement is true when you are upgrading the firmware on an HA cluster made up of two FortiAnalyzer devices?

A. You can perform the firmware upgrade using only a console connection

B. You can enable uninterruptible-upgrade so that the normal FortiAnalyzer operations are not interrupted while the cluster firmware upgrades

C. Both FortiAnalyzer devices will be upgraded at the same time

D. First, upgrade the secondary device, and then upgrade the primary device

عرض الإجابة

اجابة صحيحة: D

السؤال #26

Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

A. SMScorrect

B. Emailcorrect

C. SNMPcorrect

D. IM

عرض الإجابة

اجابة صحيحة: ABC

السؤال #27

Which statements are correct regarding FortiAnalyzer reports? (Choose two)

A. FortiAnalyzer provides the ability to create custom reports

B. FortiAnalyzer glows you to schedule reports to run

C. FortiAnalyzer includes pre-defined reports only

D. FortiAnalyzer allows reporting for FortiGate devices only

عرض الإجابة

اجابة صحيحة: AB

السؤال #28

What is the purpose of employing RAID with FortiAnalyzer?

A. To introduce redundancy to your log datacorrect

B. To provide data separation between ADOMs

C. To separate analytical and archive data

D. To back up your logs

عرض الإجابة

اجابة صحيحة: A

السؤال #29

In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

A. Remote logging must be enabled on FortiGatecorrect

B. FortiGate must be registered with FortiAnalyzercorrect

C. Log encryption must be enabled

D. ADOMs must be enabled

عرض الإجابة

اجابة صحيحة: AB

السؤال #30

What types of logs will FortiAnalyzer store?

A. Traffic/Event/Security, Data Leak Prevention (DLP) archive, Quarantine, and IPS (Intrusion Protection System) Packets

B. Traffic/Event, Data Leak Prevention (DLP) archive, Quarantine, and IPS (Intrusion Protection System) Packets

C. Traffic/Event/Security, Data Leak Prevention (DLP) archive, Quarantine

D. Data Leak Prevention (DLP) archive, Quarantine, and IPS (Intrusion Protection System) Packets

عرض الإجابة

اجابة صحيحة: A

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان