FCP_FAZ_AN-7.6 試験問題を無料オンラインアクセス

When managing incidents on FortiAnalyzer, what must an analyst be aware of?

• A.You can manually attach generated reports to incidents.
• B.Severity incidents rated with the level High have an initial service-level agreement (SLA) response time of 1 hour.
• C.Incidents must be acknowledged before they can be analyzed.
• D.The status of the incident is always linked to the status of the attached event.

Refer to the exhibit.

What conclusion can you draw from the exhibit?

• A.Unrated websites are being blocked.
• B.This is a custom view that was set by the analyst
• C.Social networking websites are being allowed
• D.These are application control logs from FortiGate

Which log will generate an event with the status Unhandled?

• A.An IPS log with action=pass.
• B.A WebFilter log with action=dropped.
• C.An AV log with action=quarantine.
• D.An AppControl log with action=blocked.

You discover that a few reports are taking a long time to generate. Which two steps can you take to troubleshoot? (Choose two.)

• A.Increase the ADOM reports quota
• B.Review report diagnostics
• C.Remove old reports from the hcache
• D.Enable auto-cache and run the reports again

Exhibit.

Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?

• A.All devices listed can be members.
• B.FortiAnalyzer1 and FortiAnalyzer3
• C.FortiAnalyzer1 and FortiAnalyzer2
• D.FortiAnalyzer2 and FortiAnalyzer3