Question 1

Which statement describes archive logs on FortiAnalyzer?

Options :

A : Logs that are indexed and stored in the SQL database

B : Logs a FortiAnalyzer administrator can access in FortiView

C : Logs compressed and saved in files with the .gz extension

D : Logs previously collected from devices that are offline

Answer: C

Question 2

Which log will generate an event with the status Unhandled?

Options :

A : An AV log with action=quarantine.

B : An IPS log withaction=pass.

C : A WebFilter log will action=dropped.

D : An AppControl log with action=blocked.

Answer: B

Question 3

You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.What does the disk quota refer to?

Options :

A : The maximum disk utilization for each device in the ADOM

B : The maximum disk utilization for the FortiAnalyzer model

C : The maximum disk utilization for the ADOM type

D : The maximum disk utilization for all devices in the ADOM

Answer: D

Question 4

Which two statements about playbook execution are true? (Choose two)

Options :

A : FortiAnalyzer will not commit changes made by a Failed playbook

B : The Playbook Monitor provides troubleshooting logs

C :

D : Even I the playbook status is Failed, individual tasks may have succeeded.

Answer: A,B

Question 5

What must you consider when using log fetching? (Choose two.)

Options :

A : The fetch client can retrieve logs from devices that are not added to its local Device Manager.

B : You can use filters to include only logs from a single device.

C : The fetching profile must include a user with the Super_User profile.

D : The archive logs retrieved from the server become archive logs in the client.

Answer: A,B

Higher Test Marks with Free Online FCP_FAZ_AN-7.4 Exam Practice

Buying Options: