السؤال #1

Which two statements regarding FortiAnalyzer log forwarding modes are true? (Choose two.)

A. Both modes, forwarding and aggregation, support encryption of logs between devices

B. In aggregation mode, you can forward logs to syslog and CEF servers

C. Forwarding mode forwards logs in real time only to other FortiAnalyzer devices

D. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time

عرض الإجابة

اجابة صحيحة: AD

السؤال #2

Refer to the exhibit. Which image corresponds to the packet capture shown in the exhibit? A) B) C) D)

A. Option Acorrect

B. Option B

C. Option C

D. Option D

عرض الإجابة

اجابة صحيحة: A

السؤال #3

Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

A. License typecorrect

B. Disk sizecorrect

C. Total quota

D. RAID levelcorrect

عرض الإجابة

اجابة صحيحة: ABD

السؤال #4

What does the disk status Degraded mean for RAID management?

A. One or more drives are missing from the FortiAnalyzer unit

B. The FortiAnalyzer device is writing to all the hard drives on the device in order to make the array fault tolerant

C. The FortiAnalyzer device is writing data to a newly added hard drive in order to restore the hard drive to an optimal state

D. The hard driveiIs no longer being used by the RAID controller

عرض الإجابة

اجابة صحيحة: D

السؤال #5

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate on FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

A. A local wildcard administrator accountcorrect

B. An administrator group

C. One or more remote LDAP serverscorrect

D. LDAP servers IP addresses added as trusted hosts

عرض الإجابة

اجابة صحيحة: AC

السؤال #6

You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed. What is the recommended method to replace the disk?

A. Shut down FortiAnalyzer and then replace the diskcorrect

B. Downgrade your RAID level, replace the disk, and then upgrade your RAID level

C. Clear all RAID alarms and replace the disk while FortiAnalyzer is still running

D. Perform a hot swap

عرض الإجابة

اجابة صحيحة: A

السؤال #7

Which two statements regarding ADOM modes are true? (Choose two.)

A. In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advanced mode, the disk quota of the ADOM is flexible

B. You can change ADOM modes only through the CLI

C. In an advanced mode ADOM, you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs

D. Normal mode is the default ADOM mode

عرض الإجابة

اجابة صحيحة: CD

السؤال #8

An administrator has moved a FortiGate device from the root ADOM to ADOM1. Which two statements are true regarding logs? (Choose two.)

A. Analytics logs will be moved to ADOM1 from the root ADOM automatically

B. Archived logs will be moved to ADOM1 from the root ADOM automatically

C. Logs will be present in both ADOMs immediately after the move

D. Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the database

عرض الإجابة

اجابة صحيحة: BD

السؤال #9

Refer to the exhibit. What is the purpose of configuring FortiAnalyzer with the settings displayed in the image?

A. To increase reliability

B. To expand bandwidth

C. To maximize resiliency

D. To improve securitycorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #10

Which two statements about FortiAnalyzer operating modes are true? (Choose two.)

A. When in collector mode, FortiAnalyzer offloads the log receiving task to the analyzer

B. When in analyzer mode, FortiAnalyzer supports event management and reporting features

C. For the collector, you should allocate most of the disk space to analytics logs

D. Analyzer mode is the default operating mode

عرض الإجابة

اجابة صحيحة: ABD

السؤال #11

FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days. What is the most likely problem?

A. Quota enforcement is acting on analytical data before a report is complete

B. Logs are rolling before the report is runcorrect

C. CPU resources are too high

D. Disk utilization for archive logs is set for 15 days

عرض الإجابة

اجابة صحيحة: B

السؤال #12

You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used. What does the disk quota refer to?

A. The maximum disk utilization for each device in the ADOM

B. The maximum disk utilization for the FortiAnalyzer model

C. The maximum disk utilization for the ADOM type

D. The maximum disk utilization for all devices in the ADOMcorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #13

You are trying to initiate an authorization request from FortiGate to FortiAnalyzer, but the Security Fabric window does not open when you click Authorize. Which two reasons can cause this to happen? (Choose two.)

A. A pre-shared key needs to be established on both sides

B. The management computer does not have connectivity to the authorization IP address and port combination

C. The Security Fabric root is unauthorized and needs to be added as a trusted host

D. The fabric authorization settings on FortiAnalyzer are misconfigured

عرض الإجابة

اجابة صحيحة: ABD

السؤال #14

When you perform a system backup, what does the backup configuration contain? (Choose two.)

A. Generated reportscorrect

B. Device listcorrect

C. Authorized devices logs

D. System informationcorrect

عرض الإجابة

اجابة صحيحة: ABD

السؤال #15

What is the purpose of the FortiAnalyzer command diagnose system print netstat?

A. It provides network statistics for active connections, including the protocols, IP addresses, and connection states

B. It provides the complete routing table, including directly connected routes

C. It provides the static DNS table, including the host names and their expiration timers

D. It provides NTP server information, including server IPs, stratum, poll time, and latency

عرض الإجابة

اجابة صحيحة: A

السؤال #16

Refer to the exhibit. Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?

A. FortiAnalyzer1 and FortiAnalyzer3

B. All devices listed can be members

C. FortiAnalyzer1 and FortiAnalyzer2

D. FortiAnalyzer2 and FortiAnalyzer3

عرض الإجابة

اجابة صحيحة: A

السؤال #17

Which process is responsible for enforcing the log file size?

A. oftpd

B. miglogd

C. sqlplugind

D. logfiledcorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #18

An administrator has configured the following settings: What is the purpose of executing these commands?

A. To record the hash value and authentication code of log files

B. To encrypt log transfer between FortiAnalyzer and other devices

C. To create the secure channel used by the OFTP process

D. To verify the integrity of the log files received

عرض الإجابة

اجابة صحيحة: D

السؤال #19

The connection status of a new device on FortiAnalyzer is listed as Unauthorized. What does that status mean?

A. It is a device whose registration has not yet been accepted in FortiAnalyzer

B. It is a device that has not yet been assigned an ADOM

C. It is a device that is waiting for you to configure a pre-shared key

D. It is a device that FortiAnalyzer does not support

عرض الإجابة

اجابة صحيحة: A

السؤال #20

Which two statements regarding ADOM modes are true? (Choose two.)

A. In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advanced mode, the disk quota of the ADOM is flexible

B. You can change ADOM modes only through the CL

C. In an advanced mode ADOM, you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs

D. Normal mode is the default ADOM mode

عرض الإجابة

اجابة صحيحة: AC

السؤال #21

Refer to the exhibit. The exhibit shows the creation of a new administrator on FortiAnalyzer. What are two effects of enabling the choice Match all users on remote server when configuring a new administrator? (Choose two.)

A. It allows user accounts in the LDAP server to use two-factor authentication

B. It creates a wildcard administrator using an LDAP server

C. User Remote-Admin from the LDAP server will be able to log in to FortiAnalyzer at any time

D. Administrators can log in to FortiAnalyzer using their credentials on the remote LDAP server

عرض الإجابة

اجابة صحيحة: BD

السؤال #22

Which two elements are contained in a system backup created on FortiAnalyzer? (Choose two.)

A. Logs from registered devicescorrect

B. Database snapshot

C. Report informationcorrect

D. System informationcorrect

عرض الإجابة

اجابة صحيحة: ACD

السؤال #23

The connection status of a new device on FortiAnalyzer is listed as Unauthorized. What does that status mean?

A. It is a device whose registration has not yet been accepted in FortiAnalvzer

B. It is a device that has not yet been assigned an ADO

C. It is a device that is waiting for you to configure a pre-shared key

D. It is a device that FortiAnalvzer does not support

عرض الإجابة

اجابة صحيحة: A

السؤال #24

Refer to the exhibit. The exhibit shows the creation of a new administrator on FortiAnalyzer. What are two effects of enabling the choice Match all users on remote server when configuring a new administrator? (Choose two.)

A. It allows user accounts in the LDAP server to use two-factor authentication

B. It creates a wildcard administrator using an LDAP server

C. User Remote-Admin from the LDAP server will be able to log in to FortiAnalyzer at any time

D. Administrators can log in to FortiAnalyzer using their credentials on the remote LDAP server

عرض الإجابة

اجابة صحيحة: ABD

السؤال #25

What are offline logs on FortiAnalyzer?

A. Compressed logs, also known as archive logs

B. Logs that are indexed and stored in the SQL database

C. Any logs collected from offline devices after they boot upcorrect

D. Real-time logs that are not yet indexed

عرض الإجابة

اجابة صحيحة: C

السؤال #26

Which statement correctly describes the management extensions available on FortiAnalyzer?

A. Management extensions do not require additional licenses

B. Management extensions allow FortiAnalyzer to act as a ForbSIEM supervisor

C. Management extensions require a dedicated VM for best performance

D. Management extensions may require a minimum number of CPU cores to run

عرض الإجابة

اجابة صحيحة: D

السؤال #27

Which image corresponds to the packet capture shown in the exhibit?

A. Option A

B. Option B

C. Option C

D. Option D

عرض الإجابة

اجابة صحيحة: A

السؤال #28

Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)

A. Mail servercorrect

B. Output profilecorrect

C. SFTP server

D. Report scheduling

عرض الإجابة

اجابة صحيحة: AB

السؤال #29

Refer to the exhibit.

A. After joining to the cluster, this FortiAnalyzer will keep an updated log database

B. This FortiAnalyzer will trigger a failover after losing communication with its peers for 10 seconds

C. This FortiAnalyzer will join to the existing HA cluster as the primary

D. This FortiAnalyzer is configured to receive logs in its port1

عرض الإجابة

اجابة صحيحة: A

السؤال #30

Which statement is true when you are upgrading the firmware on an HA cluster made up of throe FortiAnalyzer devices?

A. All FortiAnalyzer devices will be upgraded at the same time

B. Enabling uninterruptible-upgrade prevents normal operations from being interrupted during the upgrade

C. You can perform the firmware upgrade using only a console connection

D. First, upgrade the secondary devices, and then upgrade the primary device

عرض الإجابة

اجابة صحيحة: D

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان