FCP_FAZ_AD-7.4試験無料問題集（185題）「Fortinet FCP - FortiAnalyzer 7.4 Administrator 認定」

出題：1

The connection status of a new device on FortiAnalyzer is listed as Unauthorized.
What does that status mean?

A. It is a device that is waiting for you to configure a pre-shared key.

B. It is a device that FortiAnalvzer does not support.

C. It is a device that has not yet been assigned an ADOM.

D. It is a device whose registration has not yet been accepted in FortiAnalvzer.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which process is responsible for enforcing the archive file size?

A. oftpd

B. sqlplugind

C. logfiled

D. miglogd

正解：A 解答を投票する

出題：3

Which daemon is responsible for enforcing the log file size?

A. ofrpd

B. sqlplugind

C. logfiled

D. miglogd

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Refer to the exhibit.

What does the data point at 12:20 indicate?

A. The performance of FortiAnalyzer is below the baseline.

B. FortiAnalyzer is using its cache to avoid dropping logs.

C. The log insert lag time is increasing.

D. The sqlplugind service is caught up with new logs.

正解：D 解答を投票する

出題：5

What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

A. Export to Report Chart

B. Dataset Library

C. Custom View

D. Chart Builder

正解：A 解答を投票する

出題：6

Which two statements regarding the log synchronization states for HA on FortiAnalyzer are true? (Choose two.)

A. By default, Log Data Sync is disabled on all backup devices.

B. With Initial Logs Sync, when you add a unit to an HA cluster, the primary device synchronizes its logs with the backup device.

C. Log Data Sync provides real-time log synchronization to all backup devices.

D. When Log Data Sync is turned on, the backup device reboots and then rebuilds the log database with the synchronized logs.

正解：C,D 解答を投票する

出題：7

What happens when the IOC breach detection engine on FortiAnalyzer finds web logs that match a blocklisted IP address?

A. A new Infected entry is added for the corresponding endpoint.

B. The detection engine classifies those logs as Suspicious

C. The endpoint is marked as Compromised and. optionally, can be put in quarantine.

D. FortiAnalyzer flags the associated host for further analysis.

正解：A 解答を投票する

出題：8

After generating a report, you notice the information you were expecting to see is not included in it. What are two possible reasons for this scenario? (Choose two.)

A. The logfiled service has not indexed all the expected logs.

B. The time frame selected in the report is wrong.

C. You enabled auto-cache with extended log filtering.

D. The logs were overwritten by the data retention policy.

正解：A,D 解答を投票する

出題：9

An administrator has configured the following settings:
config system fortiview settings
set resolve-ip enable
end
What is the significance of executing this command?

A. It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

B. It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.

C. Use this command only if the source IP addresses are not resolved on FortiGate.

D. You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.
How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

A. Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve

B. Resolve IP addresses on FortiGate

C. Configure local DNS servers on FortiAnalyzer

D. Configure # set resolve-ip enable in the system FortiView settings

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

FCP_FAZ_AD-7.4試験無料問題集「Fortinet FCP - FortiAnalyzer 7.4 Administrator 認定」