NEW QUESTION 1
What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

• A. All FortiGates can send logs to FortiAnalyzer using the store and upload option.
• B. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.
• C. Both secure communications methods (SSL and IPsec) allow the store and upload option.
• D. Disk logging is enabled on the FortiGate through the CLI only.
• E. Disk logging is enabled by default on the FortiGate.

Answer: BCD

NEW QUESTION 2
Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

• A. Virtual domains
• B. Administrative access profiles
• C. Trusted hosts
• D. Security Fabric

Answer: BC

NEW QUESTION 3
Which statements are correct regarding FortiAnalyzer reports? (Choose two)

• A. FortiAnalyzer provides the ability to create custom reports.
• B. FortiAnalyzer glows you to schedule reports to run.
• C. FortiAnalyzer includes pre-defined reports only.
• D. FortiAnalyzer allows reporting for FortiGate devices only.

Answer: AB

NEW QUESTION 4
What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

• A. RADIUS
• B. Local
• C. LDAP
• D. PKI
• E. TACACS+

Answer: ACE

NEW QUESTION 5
If you upgrade the FortiAnalyzer firmware, which report element can be affected?

• A. Custom datasets
• B. Report scheduling
• C. Report settings
• D. Output profiles

Answer: B

Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/upgrade-guide/669300/checking-reports

NEW QUESTION 6
What are two of the key features of FortiAnalyzer? (Choose two.)

• A. Centralized log repository
• B. Cloud-based management
• C. Reports
• D. Virtual domains (VDOMs)

Answer: AC

NEW QUESTION 7
Consider the CLI command:

What is the purpose of the command?

• A. To add a unique tag to each log to prove that it came from this FortiAnalyzer
• B. To add the MD5 hash value and authentication code
• C. To add a log file checksum
• D. To encrypt log communications

Answer: C

Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/cli-reference/849211/global

NEW QUESTION 8
In Log View, you can use the Chart Builder feature to build a dataset and chart based on the filtered search results.
Similarly, which feature you can use for FortiView?

• A. Export to Report Chart
• B. Export to PDF
• C. Export to Chart Builder
• D. Export to Custom Chart

Answer: A

NEW QUESTION 9
Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.
What is the most likely problem?

• A. CPU resources are too high
• B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device
• C. The total disk space is insufficient and you need to add other disk
• D. The ADOM disk quota is set too low, based on log rates

Answer: D

NEW QUESTION 10
How do you restrict an administrator’s access to a subset of your organization’s ADOMs?

• A. Set the ADOM mode to Advanced
• B. Assign the ADOMs to the administrator’s account
• C. Configure trusted hosts
• D. Assign the default Super_User administrator profile

Answer: B

Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/717578/assigning-administrators-to

NEW QUESTION 11
You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.
What is the recommended method to replace the disk?

• A. Shut down FortiAnalyzer and then replace the disk
• B. Downgrade your RAID level, replace the disk, and then upgrade your RAID level
• C. Clear all RAID alarms and replace the disk while FortiAnalyzer is still running
• D. Perform a hot swap

Answer: A

Explanation:

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-swap-Hard-Disk-on-FortiAnalyzer/ta-

NEW QUESTION 12
If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

• A. Hot swap the disk
• B. Replace the disk and rebuild the RAID manually
• C. Take no action if the RAID level supports a failed disk
• D. Shut down FortiAnalyzer and replace the disk

Answer: D

Explanation:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD46446#:~:text=On%20FortiAnalyzer%2FFortiMana If a hard disk on a FortiAnalyzer unit fails, it must be replaced. On FortiAnalyzer devices that support
hardware RAID, the hard disk can be replaced while the unit is still running – known as hot swapping.
On FortiAnalyzer units with software RAID, the device must be shutdown prior to exchanging the hard disk.

NEW QUESTION 13
For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

• A. Principal
• B. Service provider
• C. Identity collector
• D. Identity provider

Answer: BD

NEW QUESTION 14
Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

• A. Report size will be optimized to conserve disk space on FortiAnalyzer.
• B. Reports will be cached in the memory.
• C. This feature is automatically enabled for scheduled reports.
• D. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.

Answer: AD

NEW QUESTION 15
An administrator has configured the following settings: config system fortiview settings set resolve-ip enable end
What is the significance of executing this command?

• A. Use this command only if the source IP addresses are not resolved on FortiGate.
• B. It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.
• C. You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.
• D. It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

Answer: D

NEW QUESTION 16
Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

• A. FortiAnalyzer HA can function without VRR
• B. and VRRP is required only if you have more than two FortiAnalyzer devices in a cluster.
• C. FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.
• D. All devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.
• E. FortiAnalyzer HA implementation is supported by many public cloud infrastructures such as AWS, Microsoft Azure, and Google Cloud.

Answer: BC

NEW QUESTION 17
......