FCP FCP FortiAnalyzer & Log Management

Question 1

What is the primary role of FortiAnalyzer in the Fortinet Security Fabric?

Accepted Answer

Centralized log collection, analysis, and reporting

Answer

FortiAnalyzer serves as the centralized log management and analytics platform for collecting, correlating, and reporting on data from Fortinet devices.

Question 2

Which FortiAnalyzer feature allows administrators to create automated responses based on log data thresholds?

Accepted Answer

Event handlers

Answer

Event handlers in FortiAnalyzer let administrators define conditions and trigger automated actions or alerts when log data meets specified thresholds.

Question 3

What does ADOM stand for in FortiAnalyzer?

Accepted Answer

Administrative Domain

Answer

ADOM stands for Administrative Domain, which is used in FortiAnalyzer to segment management and log data by organization or department.

Question 4

In FortiAnalyzer, which log type records traffic allowed or denied by FortiGate firewall policies?

Accepted Answer

Traffic logs

Answer

Traffic logs capture sessions that are permitted or blocked by FortiGate firewall policies, recording source, destination, and action taken.

Question 5

What FortiAnalyzer feature enables long-term storage of raw logs in a compressed archive format?

Accepted Answer

Log archiving

Answer

FortiAnalyzer's log archiving feature compresses and stores raw logs for extended periods to meet compliance and forensic investigation needs.

(FCP) Fortinet Certified Professional Security Operations Practice Test

(FCP) Fortinet Certified Professional Security Operations Practice Test

FCP FCP FortiAnalyzer & Log Management