Fortinet FCP_FAZ_AN-7.6 Practice Exam Questions & Answers

Question 6 of 53

In your role as an analyst, you frequently search the log view using the same parameters.
Instead of defining the same search filters repeatedly, what can you do to save time?

A.

Configure a custom dashboard.

B.

Configure a chart template and apply it to device groups.

C.

Configure a report template.

D.

Configure a custom view.

Question 7 of 53

How does FortiAnalyzer block indicators?

A.

It uses a webhook to allow FortiGate to send the block list.

B.

It uses a FortiClient EMS connector to send the block list.

C.

It uses a FortiManager connector to send the block list.

D.

It uses an automation script to update FortiGate with the block list.

Question 8 of 53

Which two statements regarding the outbreak detection service are true? (Choose two.)

A.

It automatically downloads new log parsers and reports

B.

It automatically downloads new event handlers and reports

C.

New downloads need to be accepted by system administrators

D.

An additional license is required

Question 9 of 53

You are trying to configure a task in the playbook editor to run a report. However, when you try to select the desired report you do not see it listed.
What is the reason?

A.

The report template needs to be switched to one that is available for playbooks.

B.

You must create a trigger to run the report first.

C.

The playbook is currently running and the report will be available after it is finished.

D.

The report does not have auto-cache and extended log filtering enabled.

Question 10 of 53

Which two parameters does FortiAnalyzer use to identify an indicator of compromise (IOC)? (Choose two.)

A.

Application category

B.

IP address

C.

URL

D.

Policy ID