Fortinet NSE5_FAZ-6.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-6.0 Online Questions & Answers

• Question 1:

  In FortiAnalyzer's FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

  A. Configure local DNS servers on FortiAnalyzer
  B. Resolve IPs on FortiGate
  C. Configure # set resolve-ip enable in the system FortiView settings
  D. Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve
  B. Resolve IPs on FortiGate

• Question 2:

  On FortiAnalyzer, what is a wildcard administrator account?

  A. An account that permits access to members of an LDAP group
  B. An account that allows guest access with read-only privileges
  C. An account that requires two-factor authentication
  D. An account that validates against any user account on a FortiAuthenticator
  D. An account that validates against any user account on a FortiAuthenticator

• Question 3:

  Logs are being deleted from one of your ADOMs earlier than the configured setting for archiving in your data policy. What is the most likely problem?

  A. The total disk space is insufficient and you need to add other disk.
  B. CPU resources are too high.
  C. The ADOM disk quota is set too low based on log rates.
  D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.
  C. The ADOM disk quota is set too low based on log rates.

• Question 4:

  How does FortiAnalyzer retrieve specific log data from the database?

  A. SQL FROM statement
  B. SQL GET statement
  C. SQL SELECT statement
  D. SQL EXTRACT statement
  C. SQL SELECT statement

• Question 5:

  View the exhibit:

  

  What does the 1000MB maximum for disk utilization refer to?

  A. The disk quota for the FortiAnalyzer model
  B. The disk quota for all devices in the ADOM
  C. The disk quota for each device in the ADOM
  D. The disk quota for the ADOM type
  B. The disk quota for all devices in the ADOM

• Question 6:

  What can the CLI command # diagnose test application oftpd 3 help you to determine?

  A. What devices and IP addresses are connecting to FortiAnalyzer
  B. What logs, if any, are reaching FortiAnalyzer
  C. What ADOMs are enabled and configured
  D. What devices are registered and unregistered
  A. What devices and IP addresses are connecting to FortiAnalyzer

• Question 7:

  You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

  A. FortiAnalyzer resets the disk quota of the new ADOM to default.
  B. FortiAnalyzer migrates archive logs to the new ADOM.
  C. FortiAnalyzer migrates analytics logs to the new ADOM.
  D. FortiAnalyzer removes analytics logs from the old ADOM.
  C. FortiAnalyzer migrates analytics logs to the new ADOM.

• Question 8:

  What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

  A. SFTP, FTP, or SCP server
  B. Mail server
  C. Output profile
  D. Report scheduling
  A. SFTP, FTP, or SCP server
  C. Output profile

• Question 9:

  View the exhibit.

  

  Why is the total quota less than the total system storage?

  A. 3.6% of the system storage is already being used.
  B. Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files
  C. The oftpd process has not archived the logs yet
  D. The logfiled process is just estimating the total quota
  B. Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files

• Question 10:

  What FortiGate process caches logs when FortiAnalyzer is not reachable?

  A. logfiled
  B. sqlplugind
  C. oftpd
  D. miglogd
  D. miglogd