EMT Practice Test

1. Question Content...

---

Question1: Which statements are correct regarding FortiAnalyzer reports? (Choose two)

Question2: Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

Question3: You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.
What does the disk quota refer to?

Question4: Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Question5: Consider the CLI command:

What is the purpose of the command?

Question6: What can the CLI command # diagnose test application oftpd 3 help you to determine?

Question7: What are offline logs on FortiAnalyzer?

Question8: What is the purpose of the following CLI command?

Question9: In FortiAnalyzer's FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

Question10: Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

Question11: Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

Question12: For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

Question13: What are two advantages of setting up fabric ADOM? (Choose two.)

Question14: What is the purpose of a dataset query in FortiAnalyzer?

Question15: A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.
What can you do on FortiAnalyzer to accomplish this?

Question16: Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

Question17: What are two of the key features of FortiAnalyzer? (Choose two.)

Question18: By default, what happens when a log file reaches its maximum file size?

Question19: View the exhibit:

What does the 1000MB maximum for disk utilization refer to?

Question20: What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

Question21: If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Question22: Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

Question23: What are the operating modes of FortiAnalyzer? (Choose two)

Question24: You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.
What is the recommended method to replace the disk?

Question25: The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device.
What can be the reason for this failure?

Question26: FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

Question27: Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

Question28: After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?
execute sql-local rebuild-adom <new-ADOM-name>