Question 1

Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

Options :

A : Log forwarding in aggregation mode

B : Log upload

C : Log fetching

D : Indicators of Compromise

Answer: C

Question 2

An administrator has configured the following settings:

config system fortiview settings

set resolve-ip enable

end

What is the significance of executing this command?

Options :

A : Use this command only if the source IP addresses are not resolved on FortiGate.

B : It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.

C : You must configure local DNS servers on FortiGate for this command to resolve IP addresses on FortiAnalyzer.

D : It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

Answer: B

Question 3

What FortiGate process caches logs when FortiAnalyzer is not reachable?

Options :

A : oftpd

B : miglogd

C : sqlplugind

D : logfiled

Answer: B

Question 4

Which log will generate an event with the status Contained?

Options :

A : An IPS log with action=pass.

B : AWebFilter log with action=dropped.

C : An AV log with action=quarantine.

D : An AppControl log with action=blocked.

Answer: C

Question 5

Which statement about reports is true?

Options :

A : a. They can only be viewed locally on FortiAnalyzer.

B : b. They can be generated on demand or by schedule.

C : c. They require an output profile before they can be generated.

D : d. They require a password before they can be generated.

Answer: B