EMT Practice Test

1. Question Content...

---

Question1: What can you do on FortiAnalyzer to restrict administrative access from specific locations?

Question2: Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

Question3: What is the purpose of a dataset query in FortiAnalyzer?

Question4: FortiAnalyzer centralizes which functions? (Choose three)

Question5: Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

Question6: You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

Question7: Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally?
(Choose two.)

Question8: Which statements are correct regarding FortiAnalyzer reports? (Choose two)

Question9: Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.
What is the most likely problem?

Question10: How do you restrict an administrator's access to a subset of your organization's ADOMs?

Question11: What is the purpose of employing RAID with FortiAnalyzer?

Question12: How are logs forwarded when FortiAnalyzer is using aggregation mode?

Question13: You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

Question14: Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

Question15: Which two statements express the advantages of grouping similar reports? (Choose two.)

Question16: What are analytics logs on FortiAnalyzer?

Question17: If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Question18: If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

Question19: Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

Question20: Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Question21: In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

Question22: Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

Question23: The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device.
What can be the reason for this failure?

Question24: Which two statements are true regarding ADOM modes? (Choose two.)

Question25: Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

Question26: What are offline logs on FortiAnalyzer?

Question27: Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

Question28: An administrator has configured the following settings:
config system global
set log-checksum md5-auth
end
What is the significance of executing this command?

Question29: What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

Question30: What two things should an administrator do to view Compromised Hosts on FortiAnalyzer? (Choose two.)

Question31: What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

Question32: On FortiAnalyzer, what is a wildcard administrator account?

Question33: Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)