Home

Home / Fortinet / FCP_FAZ_AN-7.4

Question list

List of questions

Question 1

(0)

Exhibit. Based on the partial outputs displayed, which devices can be members of a FotiAnalyzer Fabric?

Question 2

(0)

Which two actions should an administrator take to vide Compromised Hosts on FortiAnalyzer? (Choose two.)

Question 3

(0)

You need to move reports between two ADOMs. Which two statements are true? (Choose two.)

Question 4

(0)

Which log will generate an event with the status Unhandled?

Question 5

(0)

Exhibit. Which statement about the event displayed is correct?

Question 6

(0)

Which statement describes archive logs on FortiAnalyzer?

Question 7

(0)

Which statement about sending notifications with incident update is true?

Question 8

(0)

Which statement about the FortiSOAR management extension is correct?

Question 9

(0)

Which SQL query is in the correct order to query to database in the FortiAnalyzer?

Question 10

(0)

You created a playbook on FortiAnalyzer that uses a FortiOS connector. When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stich are availab

Open VPLUS File

Convert VPLUS to PDF

Related questions

You created a playbook on FortiAnalyzer that uses a FortiOS connector. When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stich are available in the FortiOS connector?

Which statement correctly describes one Difference between templates and reports?

Which statement about the FortiSIEM management extension is correct?

Which log will generate an event with the status Unhandled?

Exhibit. What is the purpose of using the Chart Builder feature On FortiAnalyzer?

Which statement about sending notifications with incident updates is true?

What is the purpose of playbook trigger variables?

What happens when the indicator of compromise (IOC) engine on FortiAnalyzer finds web logs that match blacklisted IP addresses?

You are trying to configure a task in the playbook editor to run a report. However, when you try to select the desired playbook, you do to see it listed. What is the reason?

Exhibit. What does the data point at 12:20 indicate?

Question 48 - FCP_FAZ_AN-7.4 discussion

Report

Which log will generate an event with the status Contained?

A.

An AV log with action=quarantine.

B.

An IPS log with action=pass.

C.

A WebFilter log will action=dropped.

D.

An AppControl log with action=blocked.

Show Answer

asked 27/11/2024

Alysson Rodrigo Freires Neto

44 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first