FCP_FAZ_AD-7.4 Practice Test

What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

A. RADIUS

B. Local

C. LDAP

D. PKI

E. TACACS+

What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

A. There is no need to do anything because the disk will self-recover.

B. Run execute format disk to format and restart the FortiAnalyzer device.

C. Perform a hot swap of the disk.

D. Shut down FortiAnalyzer and replace the disk.

Refer to the exhibit.



Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin", and coming from Laptop1.
Which filter will achieve the desired result?

A. operation-login & dstip==10.1.1.210 & user!-admin

B. operation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin

C. operation-login & performed_on=="GUI(10.1.1.210)" & user!=admin

D. operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin

Which daemon is responsible for enforcing the log file size?

A. sqlplugind

B. logfiled

C. miglogd

D. ofrpd

Which SQL query is in the correct order to query the database in the FortiAnslyzer?

A. SELECT devid FROM Slog GROOP BY devid WHERE * user' =* USERl'

B. SELECT devid WHERE 'u3er'='USERl' FROM $ log GROUP BY devid

C. SELECT devid FROM Slog- WHERE *user' =' USERl' GROUP BY devid

D. FROM Slog WHERE 'user* =' USERl' SELECT devid GROUP BY devid