Question 1

What must you consider when using log fetching? (Choose two.)

Options :

A : The fetch client can retrieve logs from devices that are not added to its local Device Manager.

B : You can use filters to include only logs from a single device.

C : The fetching profile must include a user with the Super_User profile.

D : The archive logs retrieved from the server become archive logs in the client.

Answer: A,B

Question 2

What are event handlers?Select one:

Options :

A : Specific matched conditions in the raw logs

B : Alert notifications

C : Threats identified by FortiGuard

D : SNMP traps

Answer: A

Question 3

When is the execution of a playbook considered as failed?Select one:

Options :

A : When the playbook is imported from another ADOM

B : When the playbook is disabled

C : When all the tasks fail

D : When at least one of the tasks fails

Answer: D

Question 4

What is included in the allocated disk quota for each ADOM on FortiAnalyzer?

Options :

A : a. Archive logs and Analytics logs

B : b. Raw logs and Archive files

C : c. Raw logs and Analytics logs

D : d. SQL tables and Analytics logs

Answer: A

Question 5

You find that as part of your role as an analyst, you frequently search log View using the same parameters. Instead of defining your search filters repeatedly, what can you do to save time?

Options :

A : Configure a custom dashboard.

B : Configure a custom view.

C : Configure a data selector.

D : Configure a marco and apply it to device groups.

Answer: B

Higher Test Marks with Free Online FCP_FAZ_AN-7.4 Exam Practice

Buying Options: