Fortinet FCP - FortiAnalyzer 7.4 Analyst - FCP_FAZ

QUESTION NO: 1
Which two statements regarding FortiAnalyzer operating modes are true? (Choose two.)

A. When running in collector mode, FortiAnalyzer can forward logs to a syslog server. B. You can create and edit reports when FortiAnalyzer is running in collector mode. C. A topology with FortiAnalyzeer devices running in both modes can improve their performance. D. FortiAnalyzer runs in collector mode by default unless it is configured for HA.

Correct Answer: C,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Which statement correctly describes one Difference between templates and reports?

A. Template are mapped to device groups. while reports are mapped to ADOMs B. Reports support macros, but templates do not. C. Templates can be cloned, but reports cannot be cloned. D. Reports provide mora configuration options than templates

Correct Answer: A

QUESTION NO: 3
Which two actions should an administrator take to vide Compromised Hosts on FortiAnalyzer? (Choose two.)

A. Subscribe FortiAnalyzer to FortiGuard to keep its local threat database up to date. B. Enable device detection on the FotiGate device that are sending logs to FortiAnalyzer. C. Make sure all endpoints are reachable by FortiAnalyzer. D. Enable web filtering in firewall policies on FortiGate devices, and make sure these logs are sent to fortiAnalyzer.

Correct Answer: B,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
Which two statement regarding the outbreak detection service are true? (Choose two.)

A. New alerts are received by email. B. It automatically downloads new event handlers and reports. C. Outbreak alerts are available on the root ADOM only. D. An additional license is required.

Correct Answer: B,C

QUESTION NO: 5
What is the purpose of running the command diagnose sql status sqlreportd?

A. To list the current SQL processes running B. To view a list of scheduled reports C. To identify the database log insertion status D. To display the SQL query connections and hcache status

Correct Answer: D

QUESTION NO: 6
Refer to the exhibit.

What can you conclude about the output?

A. The log rate higher than the message rate is not normal. B. The output is not ADOM specific. C. There are more event logs than traffic logs. D. The low indexing values require investigation.

Correct Answer: A

Fortinet FCP - FortiAnalyzer 7.4 Analyst - FCP_FAZ_AN-7.4 Exam Questions