Fortinet NSE5_FAZ-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-5.4 Online Questions & Answers

• Question 1:

  On FortiAnalyzer, what is a wildcard administrator account?

  A. An account that permits access to members of a LDAP group
  B. An account that allows guest access with read-only privileges
  C. An account that requires two-factor authentication
  D. An account that validates against any user account on a FortiAuthenticator
  D. An account that validates against any user account on a FortiAuthenticator

• Question 2:

  What purposes does the auto-cache setting on reports serve? (Choose two.)

  A. To automatically update the hcache when new logs arrive
  B. To provide diagnostics on report generation time
  C. To reduce the log insert lag rate
  D. To reduce report generation time
  C. To reduce the log insert lag rate
  D. To reduce report generation time

• Question 3:

  How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

  A. Use trusted hosts
  B. Use administrative profiles
  C. Use secure protocols
  D. Use static routes
  A. Use trusted hosts

• Question 4:

  For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

  A. Use DNS
  B. Use host name resolution
  C. Use an NTP server
  D. Use real-time forwarding
  C. Use an NTP server

• Question 5:

  FortiAnalyzer uses the Optimized Fabric Transfer Protocol (OFTP) over SSL for what purpose?

  A. To prevent log modification during backup
  B. To send an identical set of logs to a second logging server
  C. To encrypt log communication between devices
  D. To upload logs to a SFTP server
  B. To send an identical set of logs to a second logging server

• Question 6:

  Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

  A. Log forwarding in aggregation mode
  B. Log upload
  C. Log fetching
  D. Indicators of Compromise
  A. Log forwarding in aggregation mode

• Question 7:

  How does FortiAnalyzer retrieve specific log data from the database?

  A. SQL FROM statement
  B. SQL GET statement
  C. SQL SELECT statement
  D. SQL EXTRACT statement
  C. SQL SELECT statement

• Question 8:

  In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

  A. ADOMs must be enabled
  B. Log encryption must be enabled
  C. FortiGate must be registered with FortiAnalyzer
  D. Remote logging must be enabled on FortiGate
  A. ADOMs must be enabled
  C. FortiGate must be registered with FortiAnalyzer

• Question 9:

  What is the purpose of employing RAID with FortiAnalyzer?

  A. To provide data separation between ADOMs
  B. To separate analytical and archive data
  C. To back up your logs
  D. To introduce redundancy to your log data
  D. To introduce redundancy to your log data

• Question 10:

  How are logs forwarded when FortiAnalyzer is using aggregation mode?

  A. Logs and content files are stored and uploaded at a scheduled time
  B. Logs and content files are forwarded as they are received
  C. Logs are forwarded ad they are received
  D. Logs are forwarded as they are received and content files are uploaded at a scheduled time
  A. Logs and content files are stored and uploaded at a scheduled time