FCP_FAZ_AN-7.6 Practice Test

FCP_FAZ_AN-7.6 Practice Test practice questions, page 3 of 3, with answer review and explanations.

Question 11

After generating a report you notice that the information you were expecting to see is not included in that report. However, you confirm that the logs are there. Which two actions must you perform? (Choose two.)

  1. Test the dataset.
  2. Check the time frame covered by the report.
  3. Increase the report utilization quota.
  4. Enable auto-cache.

Question 12

When managing incidents on FortiAnalyzer, which fact must an analyst be aware of?

  1. The status of the incident is always linked to the status of the attached event.
  2. A playbook can be run from the Incidents page.
  3. Incidents must be acknowledged before they can be analyzed.
  4. Indicators found on the Incidents page can be enriched only from the Indicators page.