Fortinet NSE5_FAZ-6.2 Free Practice Questions

NEW QUESTION 1
How does FortiAnalyzer retrieve specific log data from the database?

• A. SQL FROM statement
• B. SQL GET statement
• C. SQL SELECT statement
• D. SQL EXTRACT statement

Answer: C

NEW QUESTION 2
What are the operating modes of FortiAnalyzer? (Choose two)

• A. Standalone
• B. Manager
• C. Analyzer
• D. Collector

Answer: CD

NEW QUESTION 3
You’ve moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

• A. FortiAnalyzer resets the disk quota of the new ADOM to default.
• B. FortiAnalyzer migrates archive logs to the new ADOM.
• C. FortiAnalyzer migrates analytics logs to the new ADOM.
• D. FortiAnalyzer removes logs from the old ADOM.

Answer: C

NEW QUESTION 4
What are two of the key features of FortiAnalyzer? (Choose two.)

• A. Centralized log repository
• B. Cloud-based management
• C. Reports
• D. Virtual domains (VDOMs)

Answer: AC

NEW QUESTION 5
Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

• A. Log upload
• B. Indicators of Compromise
• C. Log forwarding an aggregation mode
• D. Log fetching

Answer: D

NEW QUESTION 6
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

• A. Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated.
• B. Must establish an IPsec tunnel ID and pre-shared key.
• C. IPsec cannot be enabled if SSL is enabled as well.
• D. IPsec is only enabled through the CLI on FortiAnalyzer.

Answer: C

NEW QUESTION 7
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

• A. SSL is the default setting.
• B. SSL communications are auto-negotiated between the two devices.
• C. SSL can send logs in real-time only.
• D. SSL encryption levels are globally set on FortiAnalyzer.
• E. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.

Answer: AD

NEW QUESTION 8
What is the recommended method of expanding disk space on a FortiAnalyzer VM?

• A. From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage
• B. From the VM host manager, expand the size of the existing virtual disk
• C. From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk
• D. From the VM host manager, add an additional virtual disk and rebuild your RAID array

Answer: A

NEW QUESTION 9
What purposes does the auto-cache setting on reports serve? (Choose two.)

• A. To reduce report generation time
• B. To automatically update the hcache when new logs arrive
• C. To reduce the log insert lag rate
• D. To provide diagnostics on report generation time

Answer: AB

NEW QUESTION 10
Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

• A. The total disk space is insufficient and you need to add other disk.
• B. CPU resources are too high.
• C. The ADOM disk quota is set too low based on log rates.
• D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.

Answer: C

NEW QUESTION 11
View the exhibit:

What does the 1000MB maximum for disk utilization refer to?

• A. The disk quota for the FortiAnalyzer model
• B. The disk quota for all devices in the ADOM
• C. The disk quota for each device in the ADOM
• D. The disk quota for the ADOM type

Answer: B

NEW QUESTION 12
What statements are true regarding disk log quota? (Choose two)

• A. The FortiAnalyzer stops logging once the disk log quota is met.
• B. The FortiAnalyzer automatically sets the disk log quota based on the device.
• C. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.
• D. The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.

Answer: CD

NEW QUESTION 13
On FortiAnalyzer, what is a wildcard administrator account?

• A. An account that permits access to members of an LDAP group
• B. An account that allows guest access with read-only privileges
• C. An account that requires two-factor authentication
• D. An account that validates against any user account on a FortiAuthenticator

Answer: D

NEW QUESTION 14
Which statements are correct regarding FortiAnalyzer reports? (Choose two)

• A. FortiAnalyzer provides the ability to create custom reports.
• B. FortiAnalyzer glows you to schedule reports to run.
• C. FortiAnalyzer includes pre-defined reports only.
• D. FortiAnalyzer allows reporting for FortiGate devices only.

Answer: AB

NEW QUESTION 15
What statements are true regarding FortiAnalyzer 's treatment of high availability (HA) dusters? (Choose two)

• A. FortiAnalyzer distinguishes different devices by their serial number.
• B. FortiAnalyzer receives logs from d devices in a duster.
• C. FortiAnalyzer receives bgs only from the primary device in the cluster.
• D. FortiAnalyzer only needs to know (he serial number of the primary device in the cluster-it automaticaly discovers the other devices.

Answer: AB

NEW QUESTION 16
What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

• A. The log file is stored as a raw log and is available for analytic support.
• B. The log file rolls over and is archived.
• C. The log file is purged from the database.
• D. The log file is overwritten.

Answer: B

NEW QUESTION 17
FortiAnalyzer centralizes which functions? (Choose three)

• A. Network analysis
• B. Graphical reporting
• C. Content archiving / data mining
• D. Vulnerability assessment
• E. Security log analysis / forensics

Answer: BCE

NEW QUESTION 18
What FortiGate process caches logs when FortiAnalyzer is not reachable?

• A. logfiled
• B. sqlplugind
• C. oftpd
• D. miglogd

Answer: D

NEW QUESTION 19
What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

• A. Chart Builder
• B. Export to Report Chart
• C. Dataset Library
• D. Custom View

Answer: A

NEW QUESTION 20
In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

• A. Configure local DNS servers on FortiAnalyzer
• B. Resolve IPs on FortiGate
• C. Configure # set resolve-ip enable in the system FortiView settings
• D. Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

Answer: B

NEW QUESTION 21
......