EMT Practice Test

1. Question Content...

---

Question1: Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

Question2: In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

Question3: When you perform a system backup, what does the backup configuration contain? (Choose two.)

Question4: What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

Question5: Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

Question6: What purposes does the auto-cache setting on reports serve? (Choose two.)

Question7: Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

Question8: If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

Question9: How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

Question10: Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

Question11: Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

Question12: If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Question13: An administrator has moved FortiGate A from the root ADOM to ADOM1.
Which two statements are true regarding logs? (Choose two.)

Question14: On the RAID management page, the disk status is listed as Initializing.
What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

Question15: In FortiAnalyzer's FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

Question16: For which two purposes would you use the command set log checksum? (Choose two.)

Question17: What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

Question18: How do you restrict an administrator's access to a subset of your organization's ADOMs?

Question19: The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device.
What can be the reason for this failure?

Question20: You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.
What is the recommended method to replace the disk?

Question21: An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1.
What should the administrator do to solve this issue?

Question22: What are two of the key features of FortiAnalyzer? (Choose two.)

Question23: What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?
(Choose two.)

Question24: What is the purpose of a predefined template on the FortiAnalyzer?

Question25: After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?
execute sql-local rebuild-adom <new-ADOM-name>

Question26: What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

Question27: For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

Question28: Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

Question29: FortiAnalyzer centralizes which functions? (Choose three)

Question30: What is the purpose of a dataset query in FortiAnalyzer?