FCP_FAZ_AN-7.6試験無料問題集（81題）「Fortinet FCP

出題：1

Which statement regarding macros on FortiAnalyzer is true?

A. Macros are ADOM-specific and each ADOM type have unique macros relevant to that ADOM.

B. Macros are useful in generating excel log files automatically based on the report settings.

C. Macros are predefined templates for reports and cannot be customized.

D. Macros are supported only on the FortiGate ADOMs.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the exhibits.

The event shown in the exhibit has been escalated to an incident.
Which SOC role is responsible for handling the escalated incident?

A. Security analyst

B. Incident responder

C. Threat hunter

D. SOC engineer

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

(When there are no matching parsers for a device log, what does FortiAnalyzer do? (Choose one answer)

A. Stores the log but doesn't normalize it

B. Archives the log for future analysis

C. Drops the log

D. Applies the generic SYSLOG parser

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

You created a playbook on FortiAnalyzer that uses a FortiOS connector.
When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stitch are available in the FortiOS connector?

A. FortiOS Event Log

B. Incoming webhook

C. Fabric Connector event

D. FortiAnalyzer Event Handler

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

(Which two parameters does FortiAnalyzer use to identify an indicator of compromise (IOC)? (Choose two answers)

A. IP address

B. Policy ID

C. URL

D. Application category

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which statement about sending notifications with incident updates is true?

A. Each connector used can have different notification settings

B. Each incident can send notification to a single external platform.

C. You must configure an output profile to send notifications by email.

D. Notifications can be sent only when an incident is created oi deleted.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

In firmware version 7.6, how does on-premises FortiAnalyzer store logs? (Choose one answer)

A. Uses Elasticsearch database

B. Uses MySQL database

C. Uses ClickHouse database

D. Uses Postgres SQL database

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Which SQL query is in the correct order to query the database in the FortiAnalyzer?

A. SELCT devid WHERE 'user'-' USER1' FROM $log GROUP By devid

B. SELECT devid FROM $log WHERE 'user'=' GROUP BY devid

C. SELECT devid FROM $log GROUP BY devid WHERE 'user',,' users1'

D. SELECT FROM $log WHERE devid 'user',, USER1' GROUP BY devid

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

A. To add charts directly to generate reports in the current ADOM.

B. To build a chart automatically based on the top 100 log entries

C. To build a dataset and chart based on the filtered search results

D. To add a new chart under FortiView to be used in new reports

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

FCP_FAZ_AN-7.6試験無料問題集「Fortinet FCP - FortiAnalyzer 7.6 Analyst 認定」