FORTIANALYZER - ADMINISTRATION AND MANAGEMENT
QUESTIONS AND CORRECT DETAILED ANSWERS
(VERIFIED ANSWERS) |ALREADY GRADED A+||BRAND NEW
how to recover password on FAZ Ans✓✓✓you cant.
use "execute migrate:" command
-system setting are not restored so it goes backto admin pw
Password policy Ans✓✓✓global admin setting.
set standard/requirements for passwords
fortianalyzer should be in what type of environment/zone/fabric
Ans✓✓✓private/trusted secure network
never reachable outside network
Always use ______ methods of communication with fortianalyzer such
as: Ans✓✓✓Secure
-HTTPS or SSH
Enable "trusted host" to limit the logins to only Ans✓✓✓certain host
Why divide into adoms? Ans✓✓✓allows you to split administration into
different groups to allow people to only administer what they need to.
enforcing least privilege methodology.
, preinstalled administrator profiles Ans✓✓✓Super_User-RW access to
devices and system
Standard_User-RW to only devices. not the system
Restricted_User- RO access for all
No_Permissions_User - no access
Trusted Host Ans✓✓✓Can be set for each individual user. restricts to IP
or subnet.
can have up to 10 ipv4 and 10 ipv6 trusted host entries
all super_users have access to all ____ Ans✓✓✓ADOMS
External authentication Ans✓✓✓TACACS, LDAP, RADIUS, PKI
system settings > remote authentication server
match all users on remote server Ans✓✓✓allows auth for all users on
the remote server.
QUESTIONS AND CORRECT DETAILED ANSWERS
(VERIFIED ANSWERS) |ALREADY GRADED A+||BRAND NEW
how to recover password on FAZ Ans✓✓✓you cant.
use "execute migrate:" command
-system setting are not restored so it goes backto admin pw
Password policy Ans✓✓✓global admin setting.
set standard/requirements for passwords
fortianalyzer should be in what type of environment/zone/fabric
Ans✓✓✓private/trusted secure network
never reachable outside network
Always use ______ methods of communication with fortianalyzer such
as: Ans✓✓✓Secure
-HTTPS or SSH
Enable "trusted host" to limit the logins to only Ans✓✓✓certain host
Why divide into adoms? Ans✓✓✓allows you to split administration into
different groups to allow people to only administer what they need to.
enforcing least privilege methodology.
, preinstalled administrator profiles Ans✓✓✓Super_User-RW access to
devices and system
Standard_User-RW to only devices. not the system
Restricted_User- RO access for all
No_Permissions_User - no access
Trusted Host Ans✓✓✓Can be set for each individual user. restricts to IP
or subnet.
can have up to 10 ipv4 and 10 ipv6 trusted host entries
all super_users have access to all ____ Ans✓✓✓ADOMS
External authentication Ans✓✓✓TACACS, LDAP, RADIUS, PKI
system settings > remote authentication server
match all users on remote server Ans✓✓✓allows auth for all users on
the remote server.
