Fortinet FCP_FAZ_AD-7.4 Practice Questions

An administrator, fortinet, can view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mail server that can be used to send alert emails.
What can be the problem?

A. ADOM mode is configured with Advanced mode.

B. A trusted host is configured.

C. fortinet is assigned the default Standard_User administrative profile.

D. fortinet is assigned the default Restricted_User administrative profile.

In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?

A. The traffic destination is another FortiGate in the fabric.

B. The upstream FortiGate is configured to do NAT

C. Log redundancy is configured in the fabric.

D. The downstream device cannot connect to FortiAnalyzer.

Which two methods can you use to restrict administrative access on FortiAnalyzer? (Choose two.)

A. Configure trusted hosts.

B. Limit access to specific virtual domains.

C. Fabric connectors to external LDAP servers.

D. Use administrator profiles.

Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.
What is the most likely problem?

A. CPU resources are too high

B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

C. The total disk space is insufficient and you need to add other disk

D. The ADOM disk quota is set too low, based on log rates

How can you attach a report to an incident?

A. By attaching it to an event handler alert

B. By editing the settings of the desired report

C. From the properties of an existing incident

D. Saving it in JSON format, and then importing it

What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

A. All FortiGates can send logs to FortiAnalyzer using the store and upload option.

B. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.

C. Both secure communications methods (SSL and IPsec) allow the store and upload option.

D. Disk logging is enabled on the FortiGate through the CLI only.

E. Disk logging is enabled by default on the FortiGate.

Which log will generate an event with the status Contained?

A. An IPS log with action=pass

B. A WebFilter log with action=dropped.

C. An AV log with action=quarantine.

D. An AppControl log with action=blocked.