FCP FCP FortiAnalyzer & Log Management 2

Question 1

What is the purpose of log forwarding in FortiAnalyzer?

Accepted Answer

To send logs to a third-party SIEM or another FortiAnalyzer

Answer

Log forwarding allows FortiAnalyzer to send log data to external systems such as third-party SIEMs, syslog servers, or another FortiAnalyzer for redundancy.

Question 2

Which FortiAnalyzer feature provides a pre-built library of reports designed for compliance frameworks like PCI-DSS?

Accepted Answer

Compliance report templates

Answer

FortiAnalyzer includes compliance report templates mapped to standards like PCI-DSS, HIPAA, and ISO 27001 to simplify audit reporting.

Question 3

In FortiAnalyzer, what does the 'Fabric Analytics' feature enable?

Accepted Answer

Correlating data across multiple Fortinet devices in the Security Fabric

Answer

Fabric Analytics enables FortiAnalyzer to correlate telemetry from multiple Fortinet Security Fabric members for holistic threat visibility.

Question 4

What is the recommended approach to maintain FortiAnalyzer high availability in a production environment?

Accepted Answer

Deploy a FortiAnalyzer HA cluster with active-passive failover

Answer

FortiAnalyzer supports active-passive HA clustering, which ensures log collection and analysis continues uninterrupted if the primary unit fails.

Question 5

Which disk quota setting in FortiAnalyzer controls how much storage each ADOM can use?

Accepted Answer

ADOM disk quota

Answer

The ADOM disk quota setting limits how much total disk space each Administrative Domain can consume for logs and archives.

(FCP) Fortinet Certified Professional Security Operations Practice Test

(FCP) Fortinet Certified Professional Security Operations Practice Test

FCP FCP FortiAnalyzer & Log Management 2