最新的Fortinet Certified Professional認證 FCP_FAZ_AN-7.6考試題庫

問題1

Refer to Exhibit:

Client-1 is trying to access the internet for web browsing.
All FortiGate devices in the topology are part of a Security Fabric with logging to FortiAnalyzer configured.
All firewall policies have logging enabled. All web filter profiles are configured to log only violations.
Which statement about the logging behavior for this specific traffic flow is true?

A. Only FGT-A will create web filter logs if it detects a violation.

B. FGT B will create traffic logs and will create web filter logs if it detects a violation.

C. Only FGT-B will create traffic logs.

D. FGT-B will see the MAC address of FGT-A as the destination and notifies FGT-A to log this flow.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題2

Refer to Exhibit:

What does the data point at 21:20 indicate?

A. FortiAnalyzer is temporarily buffering received logs so older logs can be indexed first.

B. The SQL database requires a rebuild because of high receive lag.

C. FortiAnalyzer is indexing logs faster than logs are being received.

D. The fortilogd daemon is ahead in indexing by one log.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題3

Refer to the exhibits.

The event shown in the exhibit has been escalated to an incident.
Which SOC role is responsible for handling the escalated incident?

A. Threat hunter

B. Incident responder

C. SOC engineer

D. Security analyst

正確答案: B

說明：（僅 VCESoft 成員可見）

問題4

(How does FortiAnalyzer block indicators? (Choose one answer)

A. It uses a FortiClient EMS connector to send the block list.

B. It uses a FortiManager connector to send the block list.

C. It uses an automation script to update FortiGate with the block list.

D. It uses a webhook to allow FortiGate to send the block list.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題5

Which log will generate an event with the status Unhandled?

A. An AV log with action=quarantine.

B. An IPS log with action=pass.

C. An AppControl log with action=blocked.

D. A WebFilter log with action=dropped.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題6

Which two statements about playbook execution are true? (Choose two.)

A. Even if the playbook status is Failed, individual tasks may have succeeded.

B. FortiAnalyzer will not commit changes made by a Failed playbook

C. The Playbook Monitor provides troubleshooting logs

D. You can run the default debugging playbook to investigate playbook errors.

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題7

Which statement about the FortiSOAR management extension is correct?

A. It does not include a limited trial by default.

B. It requires a FortiManager configured to manage FortiGate.

C. It requires a dedicated FortiSOAR device or VM.

D. It runs as a docker container on FortiAnalyzer.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題8

Exhibit.

What can you conclude about these search results? (Choose two.)

A. They were searched by using text mode.

B. They are not available for analysis in FortiView.

C. They can be downloaded to a file.

D. They are sortable by columns and customizable.

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題9

An administrator on your team has configured multiple reports to run periodically. Management has an additional request that all new generated reports be sent to a company email inbox for accessibility. The mail server has already been configured on FortiAnalyzer.
Which item must configure on FortiAnalyzer so that emails are sent when the reports are generated?

最新的Fortinet FCP - FortiAnalyzer 7.6 Analyst - FCP_FAZ_AN-7.6免費考試真題

最新更新

站內鏈接

聯系我們