Free FCP-FAZ-AN-7-6 Fortinet FCP-FAZ-AN-7-6 Practice Test Question

Question 1 (Topic 1)

Which statement describes archive logs on FortiAnalyzer?

Select an option, then click Submit answer.

○ Logs that are parsed and normalized by FortiAnalyzer and available in the log view
○ Logs received from other FortiAnalyzer devices
○ Logs compressed and saved in files with the .gz extension
○ Logs that are indexed and stored in the SQL database

Question 2 (Topic 1)

Which two statements about local logs on FortiAnalyzer are true? (Choose two.)

Select an option, then click Submit answer.

○ Playbook logs for all ADOMs are in the root ADOM.
○ Application control logs are ADOM specific.
○ Local logs are not displayed in FortiView.
○ Event logs are available in the root ADOM.

Reference / correct answer:

Application control logs are ADOM specific.

Most accepted answer: B. Application control logs are ADOM specific.

Community votes: A=2, B=3, C=1, D=2

Selected Answer: CD A –Incorrect - Playbook logs are not generated per specific ADOM. Application logs are ADOM-specific and do not all reside in the root ADOM. B – Incorrect - The Study Guide states that application logs are ADOM-specific (not just application control logs). C –Correct - Local logs (archive logs) are not displayed in FortiView. FortiView uses only analytics logs. D –Correct - Event logs are available in the root ADOM. The Study Guide confirms that administrators can view event logs in the root ADOM with system-wide information. upvoted 2 times

Selected Answer: AB A. Playbook logs for all ADOMs are in the root ADOM (Correct): FortiAnalyzer centralizes the execution logs of automation workflows and Playbooks from all Administrative Domains (ADOMs) inside the root ADOM, allowing a global monitoring view for the administrator. B. Application control logs are ADOM specific (Correct): Local logs related to application control capture app behavior events that strictly belong to and are isolated within the context of each specific ADOM. upvoted 2 times

Selected Answer: BD Page 59 says administrators can view both local event logs and application logs in the root ADOM; FortiAnalyzer event logs are system-wide, while application logs are ADOM-specific. upvoted 2 times

Selected Answer: AB Based on FortiAnalyzer, the two true statements regarding local logs are that playbook logs for all ADOMs are accessible in the root ADOM and event logs provide system-wide information, while application logs are ADOM-specific. upvoted 1 times

Question 3 (Topic 1)

Which two statements regarding the outbreak detection service are true? (Choose two.)

Select an option, then click Submit answer.

○ It automatically downloads new log parsers and reports
○ It automatically downloads new event handlers and reports
○ New downloads need to be accepted by system administrators
○ An additional license is required

Reference / correct answer:

It automatically downloads new event handlers and reports

Most accepted answer: B. It automatically downloads new event handlers and reports

Community votes: B=3, D=3

Selected Answer: BD The FortiAnalyzer Outbreak Detection Service is a licensed feature that allows FortiAnalyzer administrators to view Outbreak Alerts and automatically download related event handlers and reports from FortiGuard. https://docs.fortinet.com/document/fortianalyzer/7.6.4/administration-guide/658619/outbreak-alerts upvoted 1 times

Selected Answer: BD FortiAnalyzer 7.6 Analyst Study Guide. pag.134 "The FortiAnalyzer Outbreak Detection Service is a licensed feature that allows FortiAnalyzer administrators to receive and view outbreak alerts and automatically download related event handlers and reports from FortiGuard. Outbreak event handlers and reports are created in real time by Fortinet to detect and respond to emerging outbreaks." upvoted 2 times

Selected Answer: BD FortiAnalyzer 7.6.5 Administration Guide Page 357 - The FortiAnalyzer Outbreak Detection Service is a licensed feature that allows FortiAnalyzer administrators view Outbreak Alerts and automatically download related event handlers and reports from FortiGuard. upvoted 1 times

Free FCP-FAZ-AN-7-6 – Fortinet FCP-FAZ-AN-7-6 Practice Test Question