EMT Practice Test

1. Question Content...

---

Question1: Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

Question2: Why run the command diagnose sql status sqlplugind?

Question3: Which statement about the FortiSOAR management extension is correct?

Question4: Refer to the exhibit.

Which image corresponds to the packet capture shown in the exhibit?

Question5: Why must you wait for several minutes before you run a playbook that you just created?

Question6: Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

Question7: Refer to the exhibit.

The exhibit shows "remoteservergroup" is an authentication server group with LDAP and RADIUS servers.
Which two statements express the significance of enabling "Match all users on remote server" when configuring a new administrator? (Choose two.)

Question8: View the exhibit.

What does the data point at 14:35 tell you?

Question9: Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)

Question10: What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

Question11: What statements are true regarding disk log quota? (Choose two)

Question12: What are two effects of enabling auto-cache in a FortiAnalyzer report? (Choose two.)

Question13: What is the purpose of trigger variables?

Question14: What are two of the key features of FortiAnalyzer? (Choose two.)

Question15: How do you restrict an administrator's access to a subset of your organization's ADOMs?

Question16: Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

Question17: Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

Question18: Which daemon is responsible for enforcing the log file size?

Question19: Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

Question20: An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email.
What could be the problem?

Question21: Which two statements are true regarding ADOM modes? (Choose two.)

Question22: You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.
What does the disk quota refer to?

Question23: On the RAID management page, the disk status is listed as Initializing.
What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

Question24: Which two statements are true regarding fabric connectors? (Choose two.)

Question25: Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

Question26: You crested a playbook on FortiAnalyzer that uses a FortiOS connector
When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stitch are available in the FortiOS connector?

Question27: What happens when the IOC breach detection engine on FortiAnalyzer finds web logs that match a blocklisted IP address?

Question28: Which two statements express the advantages of grouping similar reports? (Choose two.)

Question29: How can you attach a report to an incident?

Question30: Which statement is true regarding Macros on FortiAnalyzer?

Question31: Which statement describes online logs on FortiAnalyzer?

Question32: What is the purpose of employing RAID with FortiAnalyzer?

Question33: FortiAnalyzer centralizes which functions? (Choose three)

Question34: What is the purpose of the following CLI command?

Question35: How are logs forwarded when FortiAnalyzer is using aggregation mode?

Question36: For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

Question37: What is the purpose of a dataset query in FortiAnalyzer?

Question38: Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

Question39: Which two purposes does the auto cache setting on reports serve? (Choose two.)

Question40: What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

Question41: Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

Question42: What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

Question43: What is the purpose of using prefilters when configuring event handlers?

Question44: What is the purpose of output variables?

Question45: Which statement about sending notifications with incident updates is true?

Question46: What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?

Question47: How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

Question48: Which statement is true when you are upgrading the firmware on an HA cluster made up of two FortiAnalyzer devices?

Question49: Which daemon is responsible for enforcing raw log file size?

Question50: Refer to the exhibit.

What does the data point at 14:55 tell you?

Question51: What can the CLI command # diagnose test application oftpd 3 help you to determine?

Question52: Refer to the exhibit.

Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin", and coming from Laptop1.
Which filter will achieve the desired result?

Question53: What does the disk status Degraded mean for RAID management?

Question54: Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally?
(Choose two.)

Question55: Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

Question56: When working with FortiAnalyzer reports, what is the purpose of a dataset?

Question57: Which statement describes a dataset in FortiAnalyzer?

Question58: In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

Question59: What are analytics logs on FortiAnalyzer?