Fortinet
FCP_FAZ_AN-7.6
Q1:
What are two effects of enabling auto-cache in a FortiAnalyzer report? (Choose two.)
☐
A
The generation time for reports is decreased.☐
B
When new logs are received, the hard-cache data is updated automatically.☐
C
FortiAnalyzer local cache is used to store generated reports.☐
D
The size of newly generated reports is optimized to conserve disk space.
Fortinet
FCP_FAZ_AN-7.6
Q2:
What are the two methods you can use to send notifications when an event is generated by an event handler? (Choose two answers)
☐
A
Send SNMP trap.☐
B
Send an alert through the FortiGuard server.☐
C
Send an alert through Fabric connectors.☐
D
Send SMS notification
Fortinet
FCP_FAZ_AN-7.6
Q3:
Exhibit.
Based on the partial outputs displayed, which devices can be members of a FotiAnalyzer Fabric?
○
A
FortiAnalayzer1 and FortiAnalyzer3○
B
FortiAnalyzer1 and FortiAnalyzer2○
C
FortiAnalyzer2 and FortiAnalyzer3○
D
All devices listed can be members.
Fortinet
FCP_FAZ_AN-7.6
Q4:
(Which two parameters does FortiAnalyzer use to identify an indicator of compromise (IOC)? (Choose two answers))
☐
A
IP address☐
B
URL☐
C
Policy ID☐
D
Application category
Fortinet
FCP_FAZ_AN-7.6
Q5:
Which statement about sending notifications with incident updates is true?
○
A
Each connector used can have different notification settings○
B
Each incident can send notification to a single external platform.○
C
You must configure an output profile to send notifications by email.○
D
Notifications can be sent only when an incident is created oi deleted.