السؤال #1

Refer to the exhibit.What does the data point at 14:55 tell you?

A. aw logs are reaching FortiAnalyzer faster than they can be indexed

B. he received rate is almost at its maximum for this device

C. ogs are being dropped

D. he sqlplugind daemon is behind in log indexing by two logs

عرض الإجابة

اجابة صحيحة: A

السؤال #2

Which two statements about FortiAnalyzer operating modes are true? (Choose two.)

A. When in collector mode, FortiAnalyzer offloads the log receiving task to the analyzer

B. When in analyzer mode, FortiAnalyzer supports event management and reporting features

C. For the collector, you should allocate most of the disk space to analytics logs

D. Analyzer mode is the default operating mode

عرض الإجابة

اجابة صحيحة: B

السؤال #3

You are trying to initiate an authorization request from FortiGate to FortiAnalyzer, but the Security Fabric window does not open when you click Authorize.Which two reasons can cause this to happen? (Choose two.)

A. A pre-shared key needs to be established on both sides

B. The management computer does not have connectivity to the authorization IP address and port combination

C. The Security Fabric root is unauthorized and needs to be added as a trusted host

D. The fabric authorization settings on FortiAnalyzer are misconfigured

عرض الإجابة

اجابة صحيحة: BD

السؤال #4

What does the disk status Degraded mean for RAID management?

A. The hard drive is no longer being used by the RAID controller

B. One or more drives are missing from the FortiAnalyzer unit

C. The device is writing data to the disk to restore the volume to an optimal state

D. FortiAnalyzer determined that the parity data in the disk is not valid

عرض الإجابة

اجابة صحيحة: B

السؤال #5

Refer to the exhibit.The image displays "he configuration of a FortiAnalyzer the administrator wants to join to an existing HA cluster.What can you conclude from the configuration displayed?

A. After joining to the cluster, this FortiAnalyzer will keep an updated log database

B. This FortiAnalyzer will trigger a failover after losing communication with its peers for 10 seconds

C. This FortiAnalyzer will join to the existing HA cluster as the primary

D. This FortiAnalyzer is configured to receive logs in its port1

عرض الإجابة

اجابة صحيحة: D

السؤال #6

Which two statements about FortiAnalyzer operating modes are true? (Choose two.)

A. When in collector mode, FortiAnalyzer offloads the log receiving task to the analyzer

B. When in analyzer mode, FortiAnalyzer supports event management and reporting features

C. For the collector, you should allocate most of the disk space to analytics logs

D. Analyzer mode is the default operating mode

عرض الإجابة

اجابة صحيحة: B

السؤال #7

You are trying to initiate an authorization request from FortiGate to FortiAnalyzer, but the Security Fabric window does not open when you click Authorize.Which two reasons can cause this to happen? (Choose two.)

A. A pre-shared key needs to be established on both sides

B. The management computer does not have connectivity to the authorization IP address and port combination

C. The Security Fabric root is unauthorized and needs to be added as a trusted host

D. The fabric authorization settings on FortiAnalyzer are misconfigured

عرض الإجابة

اجابة صحيحة: BD

السؤال #8

Which two statements regarding FortiAnalyzer log forwarding modes are true? (Choose two.)

A. Both modes, forwarding and aggregation, support encryption of logs between devices

B. In aggregation mode, you can forward logs to syslog and CEF servers

C. Forwarding mode forwards logs in real time only to other FortiAnalyzer devices

D. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time

عرض الإجابة

اجابة صحيحة: AD

السؤال #9

Which process is responsible for enforcing the log file size?

A. oftpd

B. miglogd

C. sqlplugind

D. logfiled

عرض الإجابة

اجابة صحيحة: D

السؤال #10

Which two statements regarding ADOM modes are true? (Choose two.)

A. In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advanced mode, the disk quota of the ADOM is flexible

B. You can change ADOM modes only through the CLI

C. In an advanced mode ADOM, you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs

D. Normal mode is the default ADOM mode

عرض الإجابة

اجابة صحيحة: CD

السؤال #11

Which two parameters impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

A. Total quota

B. License type

C. RAID level

D. Disk size

عرض الإجابة

اجابة صحيحة: C

السؤال #12

In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?

A. The traffic destination is another FortiGate in the fabric

B. The upstream FortiGate is configured to do NAT

C. Log redundancy is configured in the fabric

D. The downstream device cannot connect to FortiAnalyzer

عرض الإجابة

اجابة صحيحة: B

السؤال #13

Which statement correctly describes RAID 10 (1+0) on FortiAnalyzer?

A. A configuration with four disks, each with 2 TB of capacity, provides a total space of 4 TB

B. A configuration with four disks, each with 2 TB of capacity, provides a total space of 2 T

C. It uses striping to provide performance and fault tolerance

عرض الإجابة

اجابة صحيحة: A

السؤال #14

Which two statements about FortiAnalyzer operating modes are true? (Choose two.)

A. When in collector mode, FortiAnalyzer offloads the log receiving task to the analyzer

B. When in analyzer mode, FortiAnalyzer supports event management and reporting features

C. For the collector, you should allocate most of the disk space to analytics logs

D. Analyzer mode is the default operating mode

عرض الإجابة

اجابة صحيحة: B

السؤال #15

You are trying to initiate an authorization request from FortiGate to FortiAnalyzer, but the Security Fabric window does not open when you click Authorize.Which two reasons can cause this to happen? (Choose two.)

A. A pre-shared key needs to be established on both sides

B. The management computer does not have connectivity to the authorization IP address and port combination

C. The Security Fabric root is unauthorized and needs to be added as a trusted host

D. The fabric authorization settings on FortiAnalyzer are misconfigured

عرض الإجابة

اجابة صحيحة: BD

السؤال #16

What does the disk status Degraded mean for RAID management?

A. The hard drive is no longer being used by the RAID controller

B. One or more drives are missing from the FortiAnalyzer unit

C. The device is writing data to the disk to restore the volume to an optimal state

D. FortiAnalyzer determined that the parity data in the disk is not valid

عرض الإجابة

اجابة صحيحة: B

السؤال #17

Which statement is true when you are upgrading the firmware on an HA cluster made up of throe FortiAnalyzer devices?

A. All FortiAnalyzer devices will be upgraded at the same time

B. Enabling uninterruptible-upgrade prevents normal operations from being interrupted during the upgrade

C. You can perform the firmware upgrade using only a console connection

D. First, upgrade the secondary devices, and then upgrade the primary device

عرض الإجابة

اجابة صحيحة: D

السؤال #18

Which two statements about high availability (HA) on FortiAnalyzer are true? (Choose two.)

A. FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings

B. FortiAnalyzer HA active-passive mode can function without VRRP

C. All devices in a FortiAnalyzer HA cluster must run in the same operation mode, either analyzer mode or collector mode

D. All devices in a FortiAnalyzer HA cluster must have the same available disk space

عرض الإجابة

اجابة صحيحة: A

السؤال #19

Refer to the exhibit.Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?

A. FortiAnalyzer1 and FortiAnalyzer3

B. All devices listed can be members

C. FortiAnalyzer1 and FortiAnalyzer2

D. FortiAnalyzer2 and FortiAnalyzer3

عرض الإجابة

اجابة صحيحة: C

السؤال #20

Which two parameters are used to calculate the Total Quota value available on FortiAnalyzer? (Choose two.)

A. Used storage

B. Retention policy

C. Reserved space

D. Total system storage

عرض الإجابة

اجابة صحيحة: CD

السؤال #21

Refer to the exhibit.The exhibit shows the creation of a new administrator on FortiAnalyzer. The new account uses the credentials stored on an LDAP server.Why would an administrator configure a password for this account?

A. This password is used if the authentication server becomes unreachable

B. This password authenticates FortiAnalyzer aqainst the LDAP server

C. This password is set to comply with FortiAnalvzer password policy

D. This password is required because this is a restricted user

عرض الإجابة

اجابة صحيحة: A

السؤال #22

What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

A. There is no need to do anything because the disk will self-recover

B. Run execute format disk to format and restart the FortiAnalyzer device

C. Perform a hot swap of the disk

D. Shut down FortiAnalyzer and replace the disk

عرض الإجابة

اجابة صحيحة: C

السؤال #23

Which two statements regarding FortiAnalyzer log forwarding modes are true? (Choose two.)

A. Both modes, forwarding and aggregation, support encryption of logs between devices

B. In aggregation mode, you can forward logs to syslog and CEF servers

C. Forwarding mode forwards logs in real time only to other FortiAnalyzer devices

D. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time

عرض الإجابة

اجابة صحيحة: AD

السؤال #24

Refer to the exhibit.What is the purpose of configuring FortiAnalyzer with the settings displayed in the image?

A. To increase reliability

B. To expand bandwidth

C. To maximize resiliency

D. To improve security

عرض الإجابة

اجابة صحيحة: D

السؤال #25

Which statement is true about sending notifications with incident updates?

A. otifications can be sent only when an incident is updated or deleted

B. ou can send notifications to multiple external platforms

C. otifications can be sent only by email

D. f you use multiple fabric connectors, all connectors must have the same notification settings

عرض الإجابة

اجابة صحيحة: B

السؤال #26

The connection status of a new device on FortiAnalyzer is listed as Unauthorized.What does that status mean?

A. It is a device whose registration has not yet been accepted in FortiAnalyzer

B. It is a device that has not yet been assigned an ADOM

C. It is a device that is waiting for you to configure a pre-shared key

D. It is a device that FortiAnalyzer does not support

عرض الإجابة

اجابة صحيحة: A

السؤال #27

Refer to the exhibit.Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?

A. FortiAnalyzer1 and FortiAnalyzer3

B. All devices listed can be members

C. FortiAnalyzer1 and FortiAnalyzer2

D. FortiAnalyzer2 and FortiAnalyzer3

عرض الإجابة

اجابة صحيحة: A

السؤال #28

What is the purpose of a predefined template on the FortiAnalyzer?

A. t specifies report settings which contains time period, device selection, and schedule

B. t contains predefined data to generate mock reports

C. t can be edited and modified as required

D. t specifies the report layout which contains predefined texts, charts, and macros

عرض الإجابة

اجابة صحيحة: D

السؤال #29

Which process is responsible for enforcing the log file size?

A. oftpd

B. miglogd

C. sqlplugind

D. logfiled

عرض الإجابة

اجابة صحيحة: D

السؤال #30

Which two statements regarding FortiAnalyzer log forwarding modes are true? (Choose two.)

A. Both modes, forwarding and aggregation, support encryption of logs between devices

B. In aggregation mode, you can forward logs to syslog and CEF servers

C. Forwarding mode forwards logs in real time only to other FortiAnalyzer devices

D. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time

عرض الإجابة

اجابة صحيحة: AD

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان