FCP_FAZ_AN-7.6問題集、Fortinet実際の試験問題

質問 1

You are trying to configure a task in the playbook editor to run a report.
However, when you try to select the desired playbook, you do to see it listed.
What is the reason?

A. The playbook is currently running and will be available after it is finished.

B. The report does not have auto-cache and extended log filtering enabled.

C. You must create a trigger to run the report first.

D. The report has no result and must be reconfigured.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 2

Refer to the exhibit.

What can you conclude about the output?

A. The message rate being higher than the log rate is not normal.

B. Both messages and logs are almost finished indexing.

C. There are more traffic logs than event logs.

D. The output is ADOM-specific.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

When managing incidents on FortiAnalyzer, what must an analyst be aware of?

A. Severity incidents rated with the level High have an initial service-level agreement (SLA) response time of 1 hour.

B. Incidents must be acknowledged before they can be analyzed.

C. The status of the incident is always linked to the status of the attached event.

D. You can manually attach generated reports to incidents.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which statement about the FortiSOAR management extension is correct?

A. It does not include a limited trial by default.

B. It requires a FortiManager configured to manage FortiGate.

C. It requires a dedicated FortiSOAR device or VM.

D. It runs as a docker container on FortiAnalyzer.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

Exhibit.

What can you conclude about these search results? (Choose two.)

A. They were searched by using text mode.

B. They are not available for analysis in FortiView.

C. They can be downloaded to a file.

D. They are sortable by columns and customizable.

正解: A,C

解説: (PassTest メンバーにのみ表示されます)

質問 6

Refer to the exhibit with partial output:

Your colleague exported a playbook and has sent it to you for review. You open the file in a text editor and observer the output as shown in the exhibit.
Which statement about the export is true?

A. The export data type is zipped.

B. Your colleague put a password on the export.

C. The playbook is misconfigured.

D. The option to include the connector was not selected.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which two modules can be imported and exported between ADOMs on FortiAnalyzer? (Choose two.)

A. Reports

B. Datasets

C. Templates

D. Charts

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 8

Exhibit.

What is the analyst trying to create?

A. The analyst is trying to create a report in the playbook.

B. The analyst is trying to create an output variable to be used in the playbook.

C. The analyst is trying to create a trigger variable to the used in the playbook.

D. The analyst is trying to create a SOC report in the playbook.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 9

You are tasked with finding logs corresponding to a suspected attack on your network.
You need to use an interface where all identified threats within a timeframe are listed and organized. You also need to be able to quickly export the information to a PDF file.
Where can you go to accomplish this task?

A. Fabric View

B. Log Browse

C. FortiView

D. Log View

正解: C

解説: (PassTest メンバーにのみ表示されます)

Fortinet FCP - FortiAnalyzer 7.6 Analyst - FCP_FAZ_AN-7.6 模擬練習