Test Exam FAZ 7.4

1.     Which two statements regarding ADOM modes are true? (Choose two.)

• In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advanced mode,

  the disk quota of the ADOM is flexible.

• You can change ADOM modes only through the CLI.

• In an advanced mode ADOM, you can assign FortiGate VDOMs from a single FortiGate device to

  multiple FortiAnalyzer ADOMs.

• Normal mode is the default ADOM mode.

Answer explanation

In advanced mode, you can assign FortiGate VDOMs to multiple FortiAnalyzer ADOMs, which is a key feature. Additionally, normal mode is indeed the default ADOM mode, confirming the correct statements.

2.     What is the purpose of the FortiAnalyzer command diagnose system print netstat?

• It provides network statistics for active connections, including the protocols, IP addresses, and connection states.

• It provides the complete routing table, including directly connected routes.

• It provides the static DNS table, including the host names and their expiration timers.

• It provides NTP server information, including server IPs. stratum, poll time, and latency.

Answer explanation

The command 'diagnose system print netstat' displays network statistics for active connections, detailing protocols, IP addresses, and connection states, making it essential for monitoring network activity.

The exhibit shows the creation of a new administrator on FortiAnalyzer.

What are two effects of enabling the choice Match all users on remote server when configuring a

new administrator? (Choose two.)

• It allows user accounts in the LDAP server to use two-factor authentication

• It creates a wildcard administrator using an LDAP server

• User Remote-Admin from the LDAP server will be able to log in to FortiAnalyzer at any time.

• Administrators can log in to FortiAnalyzer using their credentials on the remote LDAP server.

4.    The connection status of a new device on FortiAnalyzer is listed as Unauthorized.What does that status mean?

• It is a device whose registration has not yet been accepted in FortiAnalvzer.

• It is a device that has not yet been assigned an ADOM.

• It is a device that is waiting for you to configure a pre-shared key.

• It is a device that FortiAnalvzer does not support.

5.     Refer to the exhibit

Which image corresponds to the packet capture shown in the exhibit?

• 
• 
• 
• 

6.     Refer to the exhibit

What is the purpose of configuring FortiAnalyzer with the settings displayed in the image?

• To increase reliability

• To expand bandwidth

• To maximize resiliency

• To improve security

7.     What are offline logs on FortiAnalyzer?

• Compressed logs, also known as archive logs

• Logs that are indexed and stored in the SQL database

• Any logs collected from offline devices after they boot up

• Real-time logs that are not yet indexed

8.     Which two elements are contained in a system backup created on FortiAnalyzer? (Choose two.)

• Logs from registered devices

•  Database snapshot

• Report information

• System information

9.     Refer to the exhibit.

Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?

• FortiAnalyzer1 and FortiAnalyzer3

• All devices listed can be members.

• FortiAnalyzer1 and FortiAnalyzer2

• FortiAnalyzer2 and FortiAnalyzer3

10. 10. You finished registering a FortiGate device. After traffic starts to flow through FortiGate, you notice that only some of the logs expected are being received on FortiAnalyzer. What could be the reason for the logs not arriving on FortiAnalyzer?

• FortiGate was added to the wrong ADOM type.

• This FortiGate model is not fully supported.

• FortiGate does not have logging configured correctly.

• This FortiGate is part of an HA cluster but it is the secondary device.