最新的Fortinet FCP_FAZ_AN-7.6免費考試真題

問題1

Refer to the exhibit.

What can you conclude about the output?

A. The message rate being higher than the log rate is not normal.

B. There are more traffic logs than event logs.

C. The output is ADOM-specific.

D. Both messages and logs are almost finished indexing.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題2

Refer to the exhibit.

An analyst is trying to create a dataset to pull all gambling websites that were visited by end users.
Which SQL query on FortiAnalyzer will give the result shown in the exhibit?

A. [Selected] select srcip as " SourceIP " , dstip as " DestIP " , url from $log where catdesc = ' Gambling '

B. select srcip as " SourceIPv6 " , dstip as " DestIPv6 " , url from $log where catdesc = ' Gambling '

C. select srcip as " SourceIP " , dstip as " DestIP " , url from $log where catdesc = ' Dating '

D. select srcip as " SourceIP " , dstip as " DestIP " , url from ' Gambling ' where catdesc = $log

正確答案: A

說明：（僅 Fast2test 成員可見）

問題3

Which two statements regarding FortiAnalyzer operating modes are true? (Choose two.)

A. When running in collector mode, FortiAnalyzer can forward logs to a syslog server.

B. FortiAnalyzer runs in collector mode by default unless it is configured for HA.

C. A topology with FortiAnalyzer devices running in both modes can improve their performance.

D. You can create and edit reports when FortiAnalyzer is running in collector mode.

正確答案: A,C

說明：（僅 Fast2test 成員可見）

問題4

Which three tasks can be performed on FortiAnalyzer using FortiAI? (Choose three.)

A. Identify potential impacts and recommend remediation.

B. Configure site-to-site VPN using FortiAI.

C. Perform threat hunting.

D. Perform Incident investigation and response.

E. Configure SD-WAN overlay using FortiAI.

正確答案: A,C,D

說明：（僅 Fast2test 成員可見）

問題5

(An analyst is using FortiAI on FortiAnalyzer to simplify certain tasks but is worried about exceeding the monthly token limit. Which query will take the fewest FortiAI tokens? (Choose one answer)

A. Can you show me all the log entries for the endpoint 192.168.1.10?

B. Show all logs from the past week

C. Show logs for 192.168.1.10

D. Show logs for 192.168.1.10 (past week)

正確答案: D

說明：（僅 Fast2test 成員可見）

問題6

An administrator on your team has configured multiple reports to run periodically. Management has an additional request that all new generated reports be sent to a company email inbox for accessibility. The mail server has already been configured on FortiAnalyzer.
Which item must configure on FortiAnalyzer so that emails are sent when the reports are generated?

A. Enable the option to email all reports under the mail server.

B. Add a mailto: < email address > option within the report layouts.

C. Enable email notification under the report calendar.

D. Enable an output profile on the reports.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題7

Which three types of logs does FortiAnalyzer collect from FortiGate devices for normalization? (Choose three.)

A. Event

B. System

C. Security

D. Firewall

E. Traffic

正確答案: A,C,E

說明：（僅 Fast2test 成員可見）

問題8

Which statement describes archive logs on FortiAnalyzer?

A. Logs a FortiAnalyzer administrator can access in FortiView

B. Logs previously collected from devices that are offline

C. Logs that are indexed and stored in the SQL database

D. Logs compressed and saved in files with the .gz extension

正確答案: D

說明：（僅 Fast2test 成員可見）

問題9

Which SQL query is in the correct order to query the database in the FortiAnalyzer?

A. SELCT devid WHERE 'user'-' USER1' FROM $log GROUP By devid

B. SELECT FROM $log WHERE devid 'user',, USER1' GROUP BY devid

C. SELECT devid FROM $log GROUP BY devid WHERE 'user',,' users1'

D. SELECT devid FROM $log WHERE 'user'=' GROUP BY devid

正確答案: D

說明：（僅 Fast2test 成員可見）

最新的Fortinet FCP - FortiAnalyzer 7.6 Analyst - FCP_FAZ_AN-7.6免費考試真題

聯系我們

站內鏈接

最新更新