Online Access Free FCP_FAZ_AD-7.4 Exam Questions

Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

• A.Antivirus logs
• B.IPS logs
• C.Web filter logs
• D.Application control logs

Refer to the exhibit.

Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1:
Which filter will achieve the desired result?

• A.operation-login & dstip==10.1.1.210 & userl-admin
• B.operation-login & performed_on=="GUI(10.1.1.210)' & user!=admin
• C.operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin
• D.operation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin

An administrator has configured the following settings:

What is the purpose of executing these commands?

• A.To verify the integrity of the log files received.
• B.To record the hash value and authentication code of log files.
• C.To create the secure channel used by the OFTP process.
• D.To encrypt log transfer between FortiAnalyzer and other devices.

On FortiAnalyzer, what is a wildcard administrator account?

• A.An account that requires two-factor authentication
• B.An account that allows guest access with read-only privileges
• C.An account that permits access to members of an LDAP group
• D.An account that validates against any user account on a FortiAuthenticator

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

• A.A local wildcard administrator account
• B.An administrator group
• C.A trusted host profile that restricts access to the LDAP group
• D.A remote LDAP server