FCP_FAZ_AN-7.4 Exam Questions
67 real FCP_FAZ_AN-7.4 exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #51
What should you always do after erasing the FortiAnalyzer configuration on flash?
- Question #52Alerting and Incident Response
Which two methods can you use to send notifications when an event occurs that matches a configured event handler? (Choose two.)
event handlerSNMP trapnotificationsfabric connectors - Question #53Data Policy and Archiving
Refer to the exhibit. What can you conclude from this output?
disk quotaADOMlog storageFortiAnalyzer - Question #54Playbooks
Refer to the exhibits. Assume these are all the events that exist on the FortiAnalyzer device. How many events will be added to the incident created after running this playbook?
playbookincident creationevent filteringSOC automation - Question #55Logging and Monitoring
Which statement about SQL SELECT queries is true?
SQL SELECTdatabase schemalog queriesFortiAnalyzer - Question #56Playbooks
Refer to the exhibit. What is the analyst trying to create?
playbook variablesoutput variableplaybook editorFortiAnalyzer - Question #57SOC Operations
Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?
threat huntingproactive securityFortiAnalyzer featuresSOC - Question #58Playbooks
Refer to the exhibit with partial output. Your colleague exported a playbook and has sent it to you for review. You open the file in a text editor and observe the output as shown i...
playbook exportzip formatplaybook managementFortiAnalyzer - Question #59Logging and Monitoring
You find that as part of your role as an analyst, you frequently search Log View using the same parameters. Instead of defining your search filters repeatedly, what can you do to s...
custom viewLog Viewsearch filtersFortiAnalyzer - Question #60
When you move a FortiGate device from one ADOM to a new ADOM, what is the purpose of rebuilding the new ADOM database?
- Question #61
What is the main purpose of deploying RAID with FortiAnalyzer?
- Question #62
When generating reports on FortiAnalyzer, macros can be used to include additional data. Which two statements about macros are true? (Choose two.)
- Question #63Playbooks
Why must you wait for several minutes before you run a playbook that you just created?
playbook executionparsing delayplaybook managementFortiAnalyzer - Question #64Logging and Monitoring
Refer to the exhibit. What can you conclude about the output?
message ratelog rateindexingFortiAnalyzer performance - Question #65Reports
Refer to the exhibit. A fortiAnalyzer analyst is customizing a SQL query to use in a report. Which SQL query should the analyst run to get the expected results?
SQL queryreport customizationFortiAnalyzer reportsdata fields - Question #66Playbooks
You want to design a playbook that runs a series of tasks in parallel. How can you accomplish this goal?
playbook designparallel taskstask connectorsautomation workflow - Question #67SOC events and incident management
Refer to the exhibit. Which statement about the event displayed is correct?
security event statusrisk assessmentevent classificationincident management