FCP_FAZ_AN-7.4問題集、Fortinet実際の試験問題

質問 1

Refer to the exhibit.

What can you conclude about the output?

A. The log rate higher than the message rate is not normal.

B. There are more event logs than traffic logs.

C. The low indexing values require investigation.

D. The output is not ADOM specific.

正解: A

質問 2

Which statement correctly describes one Difference between templates and reports?

A. Template are mapped to device groups. while reports are mapped to ADOMs

B. Reports support macros, but templates do not.

C. Reports provide mora configuration options than templates

D. Templates can be cloned, but reports cannot be cloned.

正解: A

質問 3

As part of your analysis, you discover that a Medium severity level incident is fully remediated.
You change the incident status to Closed:Remediated.
Which statement about your update is true?

A. The corresponding event will be marked as Mitigated.

B. The incident severity will be lowered.

C. The incident dashboard will be updated.

D. The incident can no longer be deleted.

正解: C

質問 4

You discover that a few reports are taking a long tine lo generate. Which two steps can you Like to troubleshoot? (Choose two.)

A. Remove old reports from the hcache

B. Increase the ADOM reports quota

C. Review report diagnostics

D. Enable auto-cache and run the reports again

正解: A,D

質問 5

Why must you wait for several minutes before you run a playbook that you just created?

A. FortiAnalyzer needs that time to back up the current playbooks.

B. FortiAnalyzer needs that time to debug the new playbook.

C. FortiAnalyzer needs that time to parse the new playbook.

D. FortiAnalyzer needs that time to ensure there are no other playbooks running.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 6

Exhibit.

Laptop1 is used by several administrators to manage FotiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than admin'', and coming from Laptop1.
Which filter will achieve the desired result?

A. Operation-login and dstip==10.1.1.210 and user!-admin

B. Operation-login and performed_on==''GUI(10.1.1.100)' and user!=admin

C. Operation-login and srcip== 10.1.1.100 and dstip==10.1.1.1.210 and user==admin

D. Operation-login and performed_on==''GU (10.1.1.120)' and user!=admin

正解: B

解説: (PassTest メンバーにのみ表示されます)

Fortinet FCP - FortiAnalyzer 7.4 Analyst - FCP_FAZ_AN-7.4 模擬練習