FortiView

Play an AI-generated podcast conversation about this lesson

Which pane is designed for a network and security operations center where multiple dashboards are displayed in large monitors in a SOC or NOC environment?

Widgets

Monitors (correct)

FortiClient software inventory

Threats

What can you view on the Monitors dashboards?

Threats and compromised hosts

Wi-Fi and ZTNA

Applications and system performance

Network events and security alerts (correct)

What can you investigate on the Traffic dashboard?

Compromised hosts

DNS servers

Applications generating traffic

Top sources of traffic (correct)

What is listed as the major source of traffic from the host with the IP address 10.0.0.21?

DNS Signup and view all the answers

What does log fetching allow FortiAnalyzer to do?

Run queries or reports on archived logs Signup and view all the answers

What is the role of the FortiAnalyzer device that sends logs during log fetching?

Fetch server Signup and view all the answers

How many log-fetching sessions can be established between two FortiAnalyzer devices?

One Signup and view all the answers

What must be ensured for log fetching to work properly?

All of the above Signup and view all the answers

What happens to logs outside the data policy constraints on the client?

They are deleted Signup and view all the answers

When can you see the logs of devices in the client?

After adding the devices to Device Manager Signup and view all the answers

Which column indicates the number of different threats associated with an IOC hit in FortiView?

Threats Signup and view all the answers

What action can you take to acknowledge an IOC hit in FortiView?

Click "Ack" in the Acknowledge column Signup and view all the answers

What can you do to view more details and filter the view based on two categories for an IOC hit in FortiView?

Double-click the entry Signup and view all the answers

What does the Blocklist category indicate for an IOC hit in FortiView?

Items marked as infected after checking the blocklist Signup and view all the answers

What action can you take if you believe that an IP address or domain listed under the Detect Pattern column is valid for an IOC hit in FortiView?

Report it as misrated Signup and view all the answers

What does the Suspicious category indicate for an IOC hit in FortiView?

A match found in the suspicious list Signup and view all the answers

What does Fortianalyzer do when an endpoint is flagged in the Suspicious category for an IOC hit in FortiView?

Lists or updates the endpoint in Compromised Hosts Signup and view all the answers

What can you do to filter the entries in the IOC FortiView by specifying devices or a time period?

Filter the entries by specifying devices Signup and view all the answers

By default, can you view acknowledged IOCs in FortiView?

Yes, acknowledged IOCs are always visible Signup and view all the answers

What can you do when you double-click an entry in FortiView?

View more details and filter the view based on two categories Signup and view all the answers