Which two statements express the advantages of grouping similar reports? (Choose two.)

Improve report completion time.

Reduce the number of hcache tables and improve auto-hcache completion time.

Improve report completion time.

Conserve disk space on FortiAnalyzer by grouping multiple similar reports.

Reduce the number of hcache tables and improve auto-hcache completion time.

Provides a better summary of reports.

What are analytics logs on FortiAnalyzer?

Logs that are indexed and stored in the SQL.

Logs that roll over when the log file reaches a specific size.

Logs that are indexed and stored in the SQL.

Raw logs that are compressed and saved to a log file.

What is Log Insert Lag Time on FortiAnalyzer?

The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.

The number of times in the logs where end users experienced slowness while accessing resources.

The amount of lag time that occurs when the administrator is rebuilding the ADOM database.

The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.

The amount of time FortiAnalyzer takes to receive logs from a registered device

Refer to the exhibit. What is the purpose of using the Chart Builder feature on FortiAnalyzer?

In Log View, this feature allows you to build a dataset and chart automatically, based on the filtered search results.

In Log View, this feature allows you to build a chart and chart automatically, on the top 100 log entries.

This feature allows you to build a chart under FortiView.

You can add charts to generated reports using this feature.

FortiAnalyzer centralizes which functions? (Choose three)

Content archiving / data mining

Security log analysis / forensics

Content archiving / data mining

Security log analysis / forensics

By default, what happens when a log file reaches its maximum file size?

FortiAnalyzer rolls the active log by renaming the file.

FortiAnalyzer overwrites the log files.

FortiAnalyzer rolls the active log by renaming the file.

FortiAnalyzer forwards logs to syslog.

Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)

ADOMs constrain other administrator's access privileges to a subset of devices in the device list.

Once enabled, the Device Manager, FortiView, Event Management, and Reports tab display per ADOM.

ADOMs constrain other administrator's access privileges to a subset of devices in the device list.

Once enabled, the Device Manager, FortiView, Event Management, and Reports tab display per ADOM.

All administrators can create ADOMs--not just the admin administrator.

An administrator has configured the following settings:config system globalset log-checksum md5-authendWhat is the significance of executing this command?

This command records the log file MD5 hash value and authentication code.

This command records the log file MD5 hash value.

This command records passwords in log files and encrypts them.

This command encrypts log transfer between FortiAnalyzer and other devices.

This command records the log file MD5 hash value and authentication code.

For which two purposes would you use the command set log checksum? (Choose two.)

To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server

To prevent log modification or tampering

To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server

To prevent log modification or tampering

To send an identical set of logs to a second logging server

Refer to the exhibit. What does the data point at 14:55 tell you?

Raw logs are reaching FortiAnalyzer faster than they can be indexed

The received rate is almost at its maximum for this device

The sqlplugind daemon is behind in log indexing by two logs

Raw logs are reaching FortiAnalyzer faster than they can be indexed

You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks onFortiAnalyzer has failed.What is the recommended method to replace the disk?

Shut down FortiAnalyzer and then replace the disk

Downgrade your RAID level, replace the disk, and then upgrade your RAID level

Clear all RAID alarms and replace the disk while FortiAnalyzer is still running

On the RAID management page, the disk status is listed as Initializing.What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant

FortiAnalyzer is ensuring that the parity data of a redundant drive is valid

FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state

FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant

FortiAnalyzer is functioning normally

In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

Resolve IP addresses on FortiGate

Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve

Configure # set resolve-ip enable in the system FortiView settings

Configure local DNS servers on FortiAnalyzer

Resolve IP addresses on FortiGate

You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.What does the disk quota refer to?

The maximum disk utilization for all devices in the ADOM

The maximum disk utilization for each device in the ADOM

The maximum disk utilization for the FortiAnalyzer model

The maximum disk utilization for the ADOM type

The maximum disk utilization for all devices in the ADOM

You need to upgrade your FortiAnalyzer firmware.What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

FortiGate uses the miglogd process to cache the logs

FortiAnalyzer uses log fetching to retrieve the logs when back online

FortiGate uses the miglogd process to cache the logs

The logfiled process stores logs in offline mode

After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?execute sql-local rebuild-adom <new-ADOM-name>

To populate the new ADOM with analytical logs for the moved device, so you can run reports

To reset the disk quota enforcement to default

To remove the analytics logs of the device from the old database

To migrate the archive logs to the new ADOM

To populate the new ADOM with analytical logs for the moved device, so you can run reports

If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Shut down FortiAnalyzer and replace the disk

Replace the disk and rebuild the RAID manually

Take no action if the RAID level supports a failed disk

Shut down FortiAnalyzer and replace the disk

FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.What is the most likely problem?

Logs are rolling before the report is run

Quota enforcement is acting on analytical data before a report is complete

Logs are rolling before the report is run

Disk utilization for archive logs is set for 15 days

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

A local wildcard administrator account

A trusted host profile that restricts access to the LDAP group

What is the purpose of a dataset query in FortiAnalyzer?

It retrieves log data from the database

It extracts the database schema

It retrieves log data from the database

It injects log data into the database

Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.What is the most likely problem?

The ADOM disk quota is set too low, based on log rates

Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

The total disk space is insufficient and you need to add other disk

The ADOM disk quota is set too low, based on log rates

View the exhibit: What does the 1000MB maximum for disk utilization refer to?

The disk quota for all devices in the ADOM

The disk quota for the FortiAnalyzer model

The disk quota for all devices in the ADOM

The disk quota for each device in the ADOM

The disk quota for the ADOM type

You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

FortiAnalyzer migrates analytics logs to the new ADOM.

FortiAnalyzer resets the disk quota of the new ADOM to default.

FortiAnalyzer migrates archive logs to the new ADOM.

FortiAnalyzer migrates analytics logs to the new ADOM.

FortiAnalyzer removes logs from the old ADOM.

What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

The log file rolls over and is archived.

The log file is stored as a raw log and is available for analytic support.

The log file rolls over and is archived.

The log file is purged from the database.

What is the purpose of employing RAID with FortiAnalyzer?

To introduce redundancy to your log data

To provide data separation between ADOMs

To separate analytical and archive data

Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

Log forwarding an aggregation mode

What is the recommended method of expanding disk space on a FortiAnalyzer VM?

From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage

From the VM host manager, expand the size of the existing virtual disk

From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk

From the VM host manager, add an additional virtual disk and rebuild your RAID array

How are logs forwarded when FortiAnalyzer is using aggregation mode?

Logs and content files are stored and uploaded at a scheduled time.

Logs are forwarded as they are received and content files are uploaded at a scheduled time.

Logs and content files are stored and uploaded at a scheduled time.

Logs are forwarded as they are received.

Logs and content files are forwarded as they are received.

How do you restrict an administrator's access to a subset of your organization's ADOMs?

Assign the ADOMs to the administrator's account

Assign the default Super_User administrator profile

In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

Remote logging must be enabled on FortiGate

FortiGate must be registered with FortiAnalyzer

Remote logging must be enabled on FortiGate

FortiGate must be registered with FortiAnalyzer

Fortinet FCP_FAZ_AD-7.4 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email.

What could be the problem?

Fortinet is assigned the Standard_ User administrator profile.

A trusted host is configured.

ADOM mode is configured with Advanced mode.

Fortinet is assigned the Restricted_ User administrator profile.

Comment (0)

Fortinet FCP_FAZ_AD-7.4 Practice Test 2

Question

Fortinet FCP_FAZ_AD-7.4 Practice Tests

Practice Tests