Fortinet NSE5_FAZ-6.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-6.0 Online Questions & Answers

• Question 1:

  View the exhibit.

  

  What does the data point at 14:35 tell you?

  A. FortiAnalyzer is dropping logs.
  B. FortiAnalyzer is indexing logs faster than logs are being received.
  C. FortiAnalyzer has temporarily stopped receiving logs so older logs' can be indexed.
  D. The sqlplugind daemon is ahead in indexing by one log.
  D. The sqlplugind daemon is ahead in indexing by one log.

• Question 2:

  What is the purpose of the following CLI command?

  

  A. To add a log file checksum
  B. To add the MD5's hash value and authentication code
  C. To add a unique tag to each log to prove that it came from this FortiAnalyzer
  D. To encrypt log communications
  A. To add a log file checksum

• Question 3:

  Logs are being deleted from one of your ADOMs earlier than the configured setting for archiving in your data policy. What is the most likely problem?

  A. The total disk space is insufficient and you need to add other disk.
  B. CPU resources are too high.
  C. The ADOM disk quota is set too low based on log rates.
  D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.
  C. The ADOM disk quota is set too low based on log rates.

• Question 4:

  How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

  A. Use static routes
  B. Use administrative profiles
  C. Use trusted hosts
  D. Use secure protocols
  C. Use trusted hosts

• Question 5:

  FortiAnalyzer uses the Optimized Fabric Transfer Protocol (OFTP) over SSL for what purpose?

  A. To upload logs to an SFTP server
  B. To prevent log modification during backup
  C. To send an identical set of logs to a second logging server
  D. To encrypt log communication between devices
  D. To encrypt log communication between devices

• Question 6:

  What FortiGate process caches logs when FortiAnalyzer is not reachable?

  A. logfiled
  B. sqlplugind
  C. oftpd
  D. miglogd
  D. miglogd

• Question 7:

  For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

  A. Use DNS
  B. Use host name resolution
  C. Use real-time forwarding
  D. Use an NTP server
  D. Use an NTP server

• Question 8:

  On FortiAnalyzer, what is a wildcard administrator account?

  A. An account that permits access to members of an LDAP group
  B. An account that allows guest access with read-only privileges
  C. An account that requires two-factor authentication
  D. An account that validates against any user account on a FortiAuthenticator
  D. An account that validates against any user account on a FortiAuthenticator

• Question 9:

  How does FortiAnalyzer retrieve specific log data from the database?

  A. SQL FROM statement
  B. SQL GET statement
  C. SQL SELECT statement
  D. SQL EXTRACT statement
  C. SQL SELECT statement

• Question 10:

  If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

  A. Output profiles
  B. Report settings
  C. Report scheduling
  D. Custom datasets
  D. Custom datasets