Which two statements about playbook execution are true? (Choose two)

FortiAnalyzer will not commit changes made by a Failed playbook

The Playbook Monitor provides troubleshooting logs

FortiAnalyzer will not commit changes made by a Failed playbook

The Playbook Monitor provides troubleshooting logs

You can <un the default debugging playbook to investigate playbook errors. O Even I the playbook status is Failed, individual tasks may have succeeded.

You discover that a few reports are taking a long tine lo generate. Which two steps can you Like to troubleshoot? (Choose two.)

Remove old reports from the hcache

Enable auto-cache and run the reports again

Remove old reports from the hcache

Enable auto-cache and run the reports again

Increase the ADOM reports quota

Which two statements about exporting and importing playbacks are true? (Choose two.)

You can import a playbook even if there is another one win the same name in the destination

You can export only one playbook at a time.

A playbook that was disabled when it was exported mil be disabled when it is imported.

Playbooks can so imported 10 a different FortiAnayzer device, but only if the connectors already exist

You can import a playbook even if there is another one win the same name in the destination

You can export only one playbook at a time.

Which statement about automation connectors in FortiAnalyzer is true?

The actions available with FortiOS connectors are determined by automation rules configured on FortiGate.

An ADOM with the Fabric type comes with multiple connectors configured.

The local connector becomes available after you configured any external connector.

The local connector becomes available after you connectors are displayed.

The actions available with FortiOS connectors are determined by automation rules configured on FortiGate.

What is the purpose of using data selectors when configuring event handlers?

They apply their filter criteria to the entire event handler so that you don't have to configure the same criteria in the individual rules.

They filter the types of logs that FortiAnalyzer can accept from registered devices.

They download new filters can be used in event handlers.

They apply their filter criteria to the entire event handler so that you don't have to configure the same criteria in the individual rules.

They are common filters that can be applied simultaneously to all event handlers.

Which statement about exporting items in Report Definitions is true?

Template exports contain associated charts and datasets.

Chart exports contain associated datasets.

Which log will generate an event with the status Contained?

An AV log with action=quarantine.

A WebFilter log will action=dropped.

An AppControl log with action=blocked.

Exhibit. What does the data point at 12:20 indicate?

The log insert log time is increasing.

FortiAnalyzer is using its cache to avoid dropping logs.

The performance of FortiAnalyzer is below the baseline.

The sqiplugind service is caught up with the logs

Which statement about the FortiSIEM management extension is correct?

It can be installed as a dedicated VM.

It allows you to manage the entire life cycle of a threat or breach.

It can be installed as a dedicated VM.

Its use of the available disk space is capped at 50%.

It requires a licensed FortiSIEM supervisor.

You are trying to configure a task in the playbook editor to run a report.However, when you try to select the desired playbook, you do to see it listed.What is the reason?

The report does not have auto-cache and extended log filtering enabled.

The playbook is currently running and will be available after it is finished.

You must create a trigger to run the report first.

The report has no result and must be reconfigured.

What happens when the indicator of compromise (IOC) engine on FortiAnalyzer finds web logs that match blacklisted IP addresses?

A new infected entry is added for the corresponding endpoint under Compromised Hosts.

FortiAnalyzer flags the associated host for further analysis.

A new infected entry is added for the corresponding endpoint under Compromised Hosts.

The detection engine classifies those logs as Suspicious.

The endpoint is marked as Compromised and, optionally, can be put in quarantine.

What is the purpose of playbook trigger variables?

To display statistics about the playbook runtime

To use information from the trigger to filter the action in a task

To provide the trigger information to make the playbook start running

To store the start the times of playbooks with On_Schedule triggers

Which statement correctly describes one Difference between templates and reports?

Reports provide mora configuration options than templates

Templates can be cloned, but reports cannot be cloned.

Reports support macros, but templates do not.

Template are mapped to device groups. while reports are mapped to ADOMs

Which statement about sending notifications with incident updates is true?

Each connector used can have different notification settings

Each incident can send notification to a single external platform.

You must configure an output profile to send notifications by email.

Notifications can be sent only when an incident is created oi deleted.

Exhibit. What is the purpose of using the Chart Builder feature On FortiAnalyzer?

To build a chart automatically based on the top 100 log entries

To add charts directly to generate reports in the current ADOM.

To add a new chart under FortiView to be used in new reports

To build a dataset and chart based on the filtered search results

Fortinet FCP_FAZ_AN-7.4 Practice Test 2 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Fortinet FCP_FAZ_AN-7.4 Practice Test 2

Question

Fortinet FCP_FAZ_AN-7.4 Practice Tests

Practice Tests