EMT Practice Test

1. Question Content...

---

Question1: What are the operating modes of FortiAnalyzer? (Choose two)

Question2: For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

Question3: For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

Question4: Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

Question5: In FortiAnalyzer's FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

Question6: Which two statements about log forwarding are true? (Choose two.)

Question7: How does FortiAnalyzer retrieve specific log data from the database?

Question8: Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)

Question9: For which two purposes would you use the command set log checksum? (Choose two.)

Question10: If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Question11: You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.
What is the recommended method to replace the disk?

Question12: Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

Question13: What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?
(Choose two.)

Question14: What are two advantages of setting up fabric ADOM? (Choose two.)

Question15: What statements are true regarding FortiAnalyzer 's treatment of high availability (HA) dusters? (Choose two)

Question16: Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

Question17: On FortiAnalyzer, what is a wildcard administrator account?

Question18: Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

Question19: Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

Question20: What purposes does the auto-cache setting on reports serve? (Choose two.)

Question21: By default, what happens when a log file reaches its maximum file size?

Question22: View the exhibit.

Why is the total quota less than the total system storage?

Question23: Refer to the exhibit.

What does the data point at 14:55 tell you?