FCP_FAZ_AN-7.6 무료 덤프문제 온라인 액세스

Which log will generate an event with the status Unhandled?

• A.An AV log with action=quarantine.
• B.A WebFilter log with action=dropped.
• C.An AppControl log with action=blocked.
• D.An IPS log with action=pass.

Exhibit.

What can you conclude from this output?

• A.Archive logs are using more space than analytic logs.
• B.FGT_B is the Security Fabric root.
• C.There is no disk quota allocated to quarantining files.
• D.The allocated disk quota to ADOM1 is 3 GB.

You must find a specific security event log in the FortiAnalyzer logs displayed in FortiView, but, so far, you have been unsuccessful.
Which two tasks should you perform to investigate why you are having this issue? (Choose two.)

• A.Rebuild the SQL database and check FortiView.
• B.Review the ADOM data policy
• C.Check logs in the Log Browse
• D.Open .gz log files in FortiView.

You are trying to configure a task in the playbook editor to run a report.
However, when you try to select the desired playbook, you do to see it listed.
What is the reason?

• A.The report has no result and must be reconfigured.
• B.The playbook is currently running and will be available after it is finished.
• C.You must create a trigger to run the report first.
• D.The report does not have auto-cache and extended log filtering enabled.

When managing incidents on FortiAnalyzer, what must an analyst be aware of?

• A.You can manually attach generated reports to incidents.
• B.Incidents must be acknowledged before they can be analyzed.
• C.The status of the incident is always linked to the status of the attached event.
• D.Severity incidents rated with the level High have an initial service-level agreement (SLA) response time of 1 hour.