FCP_FAZ_AD-7.4 Exam Questions

Which two statements are true regarding fabric connectors? (Choose two.)

Which two statements about a FortiAnalyzer Fabric are true? (Choose two.)

Refer to the exhibit. What does the data point at 12:20 indicate?

What is the purpose of predefined report templates on FortiAnalyzer?

What is the purpose of output variables?

Refer to the exhibit. What does the data point at 21:20 indicate?

Which two statements are correct regarding the export and import of playbooks? (Choose two.)

Which SQL query is in the correct order to query the database in the FortiAnslyzer?

Refer to the exhibits. How many events will be added to the incident created after running this playbook?

You are looking for a playbook that was exported by a junior administrator. You perform a search and find the files listed below. Which file will perform an import operation?

Refer to the exhibit. Which statement is correct regarding the event displayed?

What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?

Refer to the exhibit. Which FortiAnalyzer tool can refer to the Cyber Kill Chain stages and allows you to identify which Fortinet products can protect you against new vulnerabiliti...

Refer to the exhibit. Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web inte...

If the primary FortiAnalyzer in an HA cluster fails, how is the new primary elected?

What are two advantages of grouping similar reports? (Choose two.)

Which statement is true about sending notifications with incident updates?

Which statement correctly describes the management extensions available on FortiAnalyzer?

A play book contains five tasks in total. An administrator executed the playbook and four out of five tasks finished successfully, but one task failed. What will be the status of t...

When working with FortiAnalyzer reports, what is the purpose of a dataset?

Refer to the exhibit. The image displays the configuration of a FortiAnalyzer the administrator wants to join to an existing HA cluster. What can you conclude from the configuratio...

You crested a playbook on FortiAnalyzer that uses a FortiOS connector. When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation...

What must you consider when using log fetching? (Choose two.)

Which two statements are true regarding the outbreak detection service? (Choose two.)

What are two effects of enabling auto-cache in a FortiAnalyzer report? (Choose two.)

Why must you wait for several minutes before you run a playbook that you just created?

Which statement describes online logs on FortiAnalyzer?

How can you attach a report to an incident?

Which item must you configure on FortiAnalyzer to email generated reports automatically?

Which statement about the FortiSOAR management extension is correct?

Why run the command diagnose sql status sqlplugind?

What are two benefits of using fabric connectors? (Choose two.)

Which log will generate an event with the status Contained?

Refer to the exhibit. Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web inte...

After generating a report, you notice the information you were expecting to see is not included in it. What are two possible reasons for this scenario? (Choose two.)

What is the purpose of using prefilters when configuring event handlers?

Which statement describes a dataset in FortiAnalyzer?

A playbook contains five tasks in total. An administrator runs the playbook and four out of five tasks finish successfully, but one task fails. What will be the status of the playb...

What is the purpose of trigger variables?

Which statement about sending notifications with incident updates is true?

Refer to the exhibit. What is the purpose of using the Chart Builder feature on FortiAnalyzer?

What happens when the IOC breach detection engine on FortiAnalyzer finds web logs that match a blocklisted IP address?

Refer to the exhibit. The image shows the details of a playbook after it finished running. What is the status of the playbook?

View the exhibit: What does the 1000MB maximum for disk utilization refer to?

You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

Refer to the exhibit. Which statement is correct regarding the event displayed?

Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

What is the recommended method of expanding disk space on a FortiAnalyzer VM?

How are logs forwarded when FortiAnalyzer is using aggregation mode?