Fortinet FCP - FortiAnalyzer 7.4 Administrator - FCP_FAZ

QUESTION NO: 1
Which statements are correct regarding FortiAnalyzer reports? (Choose two)

A. FortiAnalyzer allows reporting for FortiGate devices only. B. FortiAnalyzer glows you to schedule reports to run. C. FortiAnalyzer provides the ability to create custom reports. D. FortiAnalyzer includes pre-defined reports only.

Correct Answer: B,C

QUESTION NO: 2
Which statement about the FortiSOAR management extension is correct?

A. It does not include a limited trial by default. B. It requires a dedicated FortiSOAR device or VM. C. It requires a FortiManager configured to manage FortiGate D. It runs as a docker container on FortiAnalyzer

Correct Answer: D

QUESTION NO: 3
Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

A. To build a dataset and chart automatically, based on the filtered search results B. To build a chart automatically based on the top 100 log entries C. To add a new chart under FortiView to be used in new reports D. To add charts directly to generate reports in the current ADOM

Correct Answer: D

QUESTION NO: 4
You are trying to initiate an authorization request from FortiGate to FortiAnalyzer, but the Security Fabric window does not open when you click Authorize.
Which two reasons can cause this to happen? (Choose two.)

A. The management computer does not have connectivity to the authorization IP address and port combination. B. A pre-shared key needs to be established on both sides. C. The Security Fabric root is unauthorized and needs to be added as a trusted host. D. The fabric authorization settings on FortiAnalyzer are misconfigured.

Correct Answer: A,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Refer to the exhibits.

How many events will be added to the incident created after running this playbook?

A. Five events will be added. B. Thirteen events will be added. C. No events will be added. D. Ten events will be added.

Correct Answer: B

QUESTION NO: 6
Which statement about the FortiSIEM management extension is correct?

A. Its use of the available disk space is capped at 50%. B. It can be installed as a dedicated VM. C. Allows you to manage the entire life cycle of a threat or breach. D. It requires a licensed FortiSIEM supervisor.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.
What can you do on FortiAnalyzer to accomplish this?

A. Click Task Monitor and view the tasks performed by that administrator. B. Click FortiView and generate a report for that administrator. C. View the tasks performed by the rogue administrator in Fabric View. D. Click Log View and generate a report for that administrator.

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
Which two purposes does the auto cache setting on reports serve? (Choose two.)

A. It automatically updates the hcache when new logs arrive. B. It reduces report generation time. C. It reduces the log insert lag rate. D. It provides diagnostics on report generation time.

Correct Answer: A,B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

A. ADOMs must be enabled B. Remote logging must be enabled on FortiGate C. FortiGate must be registered with FortiAnalyzer D. Log encryption must be enabled

Correct Answer: B,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Fortinet FCP - FortiAnalyzer 7.4 Administrator - FCP_FAZ_AD-7.4 Exam Questions