Fortinet FCP - FortiAnalyzer 7.4 Administrator - FCP_FAZ_AD-7.4 Exam Practice Test

A. Logs that are collected from offline devices after they boot up.

B. Compressed logs, which are also known as archive logs, are considered to be offline logs.

C. When you restart FortiAnalyzer. all stored logs are considered to be offline logs.

D. Logs that are indexed and stored in the SQL database.

A. Log forwarding an aggregation mode

B. Log fetching

C. Log upload

D. Indicators of Compromise

A. It provides network statistics for active connections, including the protocols, IP addresses, and connection states.

B. It provides the static DNS table, including the host names and their expiration timers.

C. It provides the complete routing table, including directly connected routes.

D. It provides NTP server information, including server IPs. stratum, poll time, and latency.

A. Shut down FortiAnalyzer and replace the disk

B. Hot swap the disk

C. Replace the disk and rebuild the RAID manually

D. Take no action if the RAID level supports a failed disk

A. FortiAnalyzer is in an HA cluster.

B. ADOM mode should be set to advanced, in order to register the FortiClient EMS device.

C. ADOMs are not enabled on FortiAnalyzer.

D. A separate license is required on FortiAnalyzer in order to register the FortiClient EMS device.

A. The performance of FortiAnalyzer is below the baseline.

B. FortiAnalyzer is using its cache to avoid dropping logs.

C. The sqlplugind service is caught up with new logs.

D. The log insert lag time is increasing.

A. ADOMs with registered devices cannot be deleted.

B. Default ADOMs cannot be deleted.

C. The status of the ADOMs must be unlocked.

D. Logs must be purged or migrated before you can delete an ADOM.

A. When in collector mode, FortiAnalyzer offloads the log receiving task to the analyzer.

B. Analyzer mode is the default operating mode.

C. When in analyzer mode, FortiAnalyzer supports event management and reporting features.

D. For the collector, you should allocate most of the disk space to analytics logs.

A. What ADOMs are enabled and configured

B. What devices and IP addresses are connecting to FortiAnalyzer

C. What devices are registered and unregistered

D. What logs, if any, are reaching FortiAnalyzer

A. Logs will be presented in both ADOMs immediately after the move.

B. Analytics logs will be moved to ADOM1 from the root ADOM automatically.

C. Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the ADOM1 SQL database.

D. Archived logs will be moved to ADOM1 from the root ADOM automatically.

A. Click FortiView and generate a report for that administrator.

B. Click Log View and generate a report for that administrator.

C. View the tasks performed by the rogue administrator in Fabric View.

D. Click Task Monitor and view the tasks performed by that administrator.