Free Fortinet FCP_FAZ_AN-7.6 Exam Dumps Questions & Answers

Which two statements about exporting and importing playbooks are true? (Choose two.)

• A.  Playbooks can be imported to a different FortiAnalyzer device, but only if the connectors already exist
• B.  You can export only one playbook at a time.
• C.  A playbook that was disabled when it was exported will be disabled when it is imported.
• D.  You can import a playbook even if there is another one with the same name in the destination

Which statement about sending notifications with incident update is true?

• A.  Notifications can be sent only when an incident is updated or deleted.
• B.  You can send notifications to multiple external platforms.
• C.  If you use multiple fabric connectors, all connectors must have the same settings.
• D.  Notifications can be sent only by email.

Exhibit.

A FortiAnalyzer analyst is customizing a SQL query to use in a report.
Which SQL query should the analyst run to get the expected results?

• A. 
• B. 
• C. 
• D. 

Which two statements regarding FortiAnalyzer operating modes are true? (Choose two.)

• A.  FortiAnalyzer runs in collector mode by default unless it is configured for HA.
• B.  When running in collector mode, FortiAnalyzer can forward logs to a syslog server.
• C.  A topology with FortiAnalyzer devices running in both modes can improve their performance.
• D.  You can create and edit reports when FortiAnalyzer is running in collector mode.

(An analyst is using FortiAI on FortiAnalyzer to simplify certain tasks but is worried about exceeding the monthly token limit. Which query will take the fewest FortiAI tokens? (Choose one answer)

• A.  Show all logs from the past week
• B.  Show logs for 192.168.1.10
• C.  Can you show me all the log entries for the endpoint 192.168.1.10?
• D.  Show logs for 192.168.1.10 (past week)