FCP_FAZ_AN-7.4

Consider the CLI command: What is the purpose of the command?A . To add a unique tag to each log to prove that it came from this FortiAnalyzerB . To add a log file checksumC . To encrypt log communicationsD . To add the MD5 hash value and authentication codeView...

What is the purpose of the following CLI command? A . To encrypt log communicationsB . To add a unique tag to each log to prove that it came from this FortiAnalyzerC . To add the MD's hash value and authentication codeD . To add a log file checksumView AnswerAnswer:...

What two things should an administrator do to view Compromised Hosts on FortiAnalyzer? (Choose two.)A . Enable web filtering in firewall policies on FortiGate devices, and make sure these logs are sent to FortiAnalyzer.B . Enable device detection on an interface on the FortiGate devices that are connected to the...

Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)A . FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.B . SSL encryption levels are globally set on FortiAnalyzer.C . SSL can send logs in real-time only.D . SSL is the default setting.E...

What FortiGate process caches logs when FortiAnalyzer is not reachable?A . miglogdB . oftpdC . logfiledD . sqlplugindView AnswerAnswer: A

What statements are true regarding disk log quota? (Choose two)A . The FortiAnalyzer stops logging once the disk log quota is met.B . The FortiAnalyzer automatically sets the disk log quota based on the device.C . The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log...

Refer to the exhibit. Which statement is correct regarding the event displayed?A . An incident was created from this event.B . The security risk was blocked or dropped.C . The security event risk is considered open.D . The risk source is isolated.View AnswerAnswer: B

What database language does FortiAnalyzer use for logging and reporting?A . XQueryB . XMLC . SQLD . JavaView AnswerAnswer: C

Which statement is true when you are upgrading the firmware on an HA cluster made up of two FortiAnalyzer devices?A . You can perform the firmware upgrade using only a console connection.B . You can enable uninterruptible-upgrade so that the normal FortiAnalyzer operations are not interrupted while the cluster firmware...

Which SQL query is in the correct order to query the database in the FortiAnalyzer?A . SELECT devid WHERE 'user'='USER1' FROM $log GROUP BY devidB . FROM $log WHERE 'user'='USER1' SELECT devid GROUP BY devidC . SELECT devid FROM $log WHERE 'user'='USER1' GROUP BY devidD . SELECT devid FROM $log...