You are tasked with finding logs corresponding to a suspected attack on your network.
You need to use an interface where all identified threats within timeframe are listed and organized. You also need to be able to quickly export the information to a PDF file.
Where can you go to accomplish this task?
A. Log Browse
B. Fabric View
C. Log View
D. FortiView
正解:C
質問 2:
Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?
A. Threat hunting
B. Outbreak alert services
C. Incidents dashboard
D. FortiView Monitor
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 3:
After generating a report, you notice the information you where expecting to see is not included in it.
However, you confirm that the logs are there.
A. Disable auto-cache.
B. Check the time frame covered by the report.
C. Test the dataset
D. Increase the report utilization quota.
正解:B,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
Refer to Exhibit:

What does the data point at 21:20 indicate?
A. The SQL database requires a rebuild because of high receive lag.
B. FortiAnalyzer is indexing logs faster than logs are being received.
C. FortiAnalyzer is temporarily buffering received logs so older logs can be indexed first.
D. The fortilogd daemon is ahead in indexing by one log.
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
Which two statements regarding FortiAnalyzer operating modes are true? (Choose two.)
A. You can create and edit reports when FortiAnalyzer is running in collector mode.
B. FortiAnalyzer runs in collector mode by default unless it is configured for HA.
C. A topology with FortiAnalyzeer devices running in both modes can improve their performance.
D. When running in collector mode, FortiAnalyzer can forward logs to a syslog server.
正解:B,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 6:
When managing incidents on FortiAnlyzer, what must an analyst be aware of?
A. Severity incidents rated with the level High have an initial service-level agreement (SLA) response time of 1 hour.
B. You can manually attach generated reports to incidents.
C. The status of the incident is always linked to the status of the attach event.
D. Incidents must be acknowledged before they can be analyzed.
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
1097 お客様のコメント
クリック」





Nishio -
感覚がよく、FCP_FAZ_AN-7.4問題集にある問題がたくさん出てきました。結果はもちろん合格だよぉーん。