最新的FCP in Security Operations認證 FCP_FAZ_AN-7.4考試題庫

問題1

Exhibit.

Assume these are all the events that exist on the FortiAnalyzer device.
How many events will be added to the incident created after running this playbook?

A. Four events will be added.

B. Eleven events will be added.

C. No events will be added.

D. Seven events will be added

正確答案: A

說明：（僅 VCESoft 成員可見）

問題2

An administrator on your team has configured multiple reports to run periodically. Management has an additional request that all new generated reports be sent to a company email inbox for accessibility. The mail server has already been configured on FortiAnalyzer.
Which item must configure on FortiAnalyzer so that emails are sent when the reports are generated?

A. Add a mailto:<email address> option within the report layouts.

B. Enable the option to email all repots under the mail server.

C. Enable email notification under the report calendar.

D. Enable an output profile on the reports.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題3

What are two effects of enabling auto-cache in a FortiAnalyzer report? (Choose two.)

A. The generation time for reports is decreased.

B. FortiAnalyzer local cache is used to store generated reports.

C. The size of newly generated reports is optimized to conserve disk space.

D. When new logs are received, the hard-cache data is updated automatically.

正確答案: A,B

說明：（僅 VCESoft 成員可見）

問題4

Which statement describes archive logs on FortiAnalyzer?

A. Logs that are indexed and stored in the SQL database

B. Logs compressed and saved in files with the .gz extension

C. Logs previously collected from devices that are offline

D. Logs a FortiAnalyzer administrator can access in FortiView

正確答案: B

說明：（僅 VCESoft 成員可見）

問題5

You are trying to configure a task in the playbook editor to run a report.
However, when you try to select the desired playbook, you do to see it listed.
What is the reason?

A. The report does not have auto-cache and extended log filtering enabled.

B. The report has no result and must be reconfigured.

C. You must create a trigger to run the report first.

D. The playbook is currently running and will be available after it is finished.

正確答案: C

問題6

You find that as part of your role as an analyst, you frequently search log View using the same parameters.
Instead of defining your search filters repeatedly, what can you do to save time?

A. Configure a custom view.

B. Configure a custom dashboard.

C. Configure a data selector.

D. Configure a marco and apply it to device groups.

正確答案: A

說明：（僅 VCESoft 成員可見）

最新的Fortinet FCP - FortiAnalyzer 7.4 Analyst - FCP_FAZ_AN-7.4免費考試真題

最新更新

站內鏈接

聯系我們