EMT Practice Test

1. Question Content...

---

Question1: When you perform a system backup, what does the backup configuration contain? (Choose two.)

Question2: Which two statement are true regardless initial Logs sync and Log Data Sync for Ha on FortiAnalyzer?

Question3: You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.
What does the disk quota refer to?

Question4: You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

Question5: Which two statements are correct regarding the export and import of playbooks? (Choose two.)

Question6: Which two elements are contained in a system backup created on FortiAnalyzer? (Choose two.)

Question7: Which statement correctly describes the management extensions available on FortiAnalyzer?

Question8: FortiAnalyzer centralizes which functions? (Choose three)

Question9: Which two statements about log forwarding are true? (Choose two.)

Question10: Which statement is true about sending notifications with incident updates?

Question11: What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

Question12: Which statements are correct regarding FortiAnalyzer reports? (Choose two)

Question13: Refer to the exhibit.

Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1:
Which filter will achieve the desired result?

Question14: Which daemon is responsible for enforcing the log file size?

Question15: You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

Question16: How do you restrict an administrator's access to a subset of your organization's ADOMs?

Question17: Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

Question18: For which two purposes would you use the command set log checksum? (Choose two.)

Question19: You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.
What is the recommended method to replace the disk?

Question20: What are offline logs on FortiAnalyzer?

Question21: How does FortiAnalyzer retrieve specific log data from the database?

Question22: Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)

Question23: Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

Question24: You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

Question25: If you upgrade the FortiAnalyzer firmware, which report element can be affected?

Question26: What statements are true regarding FortiAnalyzer 's treatment of high availability (HA) dusters? (Choose two)

Question27: Refer to the exhibits.


How many events will be added to the incident created after running this playbook?

Question28: What are two of the key features of FortiAnalyzer? (Choose two.)

Question29: Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

Question30: What two things should an administrator do to view Compromised Hosts on FortiAnalyzer? (Choose two.)

Question31: Which statement is true regarding Macros on FortiAnalyzer?

Question32: What does the disk status Degraded mean for RAID management?

Question33: Which two statements are true regarding ADOM modes? (Choose two.)

Question34: You crested a playbook on FortiAnalyzer that uses a FortiOS connector
When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stitch are available in the FortiOS connector?

Question35: In Log View, you can use the Chart Builder feature to build a dataset and chart based on the filtered search results.
Similarly, which feature you can use for FortiView?

Question36: What is the recommended method of expanding disk space on a FortiAnalyzer VM?

Question37: FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.
What is the most likely problem?

Question38: What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?

Question39: What can the CLI command # diagnose test application oftpd 3 help you to determine?

Question40: An administrator has configured the following settings:
config system global
set log-checksum md5-auth
end
What is the significance of executing this command?

Question41: Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

Question42: An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1.
What should the administrator do to solve this issue?

Question43: What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

Question44: Which statement is true when you are upgrading the firmware on an HA cluster made up of two FortiAnalyzer devices?

Question45: After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?
execute sql-local rebuild-adom <new-ADOM-name>

Question46: You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.
What is the recommended method to replace the disk?

Question47: Consider the CLI command:

What is the purpose of the command?

Question48: Refer to the exhibit.

Which image corresponds to the packet capture shown in the exhibit?
A)

B)

C)

D)

Question49: An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email.
What could be the problem?

Question50: Refer to the exhibit.

What does the data point at 14:55 tell you?

Question51: An administrator has configured the following settings:
config system fortiview settings
set resolve-ip enable
end
What is the significance of executing this command?

Question52: Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

Question53: What is the purpose of output variables?

Question54: Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

Question55: A play book contains five tasks in total. An administrator executed the playbook and four out of five tasks finished successfully, but one task failed. What will be the status of the playbook after its execution?

Question56: What is the purpose of a predefined template on the FortiAnalyzer?

Question57: Consider the CLI command:

What is the purpose of the command?

Question58: Refer to the exhibit.

Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1:
Which filter will achieve the desired result?

Question59: Refer to the exhibits.


How many events will be added to the incident created after running this playbook?

Question60: What can you do on FortiAnalyzer to restrict administrative access from specific locations?