Question 1

Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

Options :

A : Log forwarding in aggregation mode

B : Log upload

C : Log fetching

D : Indicators of Compromise

Answer: C

Question 2

If a hard disk on FortiAnalyzer that supports hardware RAID fails, what can be done on FortiAnalyzer?

Options :

A : Shut down FortiAnalyzer and replace the disk.

B : Run execute format disk to format and restart the FortiAnalyzer device.

C : No need to do anything because the disk will self-recover.

D : Hot swap the disk

Answer: D

Question 3

A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.What can you do on FortiAnalyzer to accomplish this?

Options :

A : Click Task Monitor and view the tasks performed by that administrator.

B : Click Fabric View and view the tasks performed by the rogue administrator.

C : Click Log View and generate a report for that administrator.

D : Click FortiView and generate a report for that administrator.

Answer: A

Question 4

Which statement about the FortiSIEM management extension is correct?

Options :

A : Allows you to manage the entire life cycle of a threat or breach.

B : Its use of the available disk space is capped at 50%.

C : It requires a licensed FortiSIEM supervisor.

D : It can be installed as a dedicated VM.

Answer: D

Question 5

It is a best practice to upload FortiAnalyzer local logs to a remote server.Which three remote servers are supported for the upload? (Choose three.)

Options :

A : FTP

B : SFTP

C : UDP

D : SCP

E : TCP

Answer: A,B,D

Free FCP_FAZ_AN-7.4 Mock Exam – Practice Online Confidently

Buying Options: