Fortinet NSE5_FAZ-6.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-6.2 Online Questions & Answers

• Question 1:

  What FortiGate process caches logs when FortiAnalyzer is not reachable?

  A. logfiled
  B. sqlplugind
  C. oftpd
  D. miglogd
  D. miglogd

  ---

  explanation:

  Reference: https://forum.fortinet.com/tm.aspx?m=143106

• Question 2:

  In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

  How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

  A. Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve
  B. Configure # set resolve-ip enable in the system FortiView settings
  C. Configure local DNS servers on FortiAnalyzer
  D. Resolve IP addresses on FortiGate
  B. Configure # set resolve-ip enable in the system FortiView settings

  ---

  explanation:

  Reference: https://forum.fortinet.com/tm.aspx?m=156950

• Question 3:

  How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

  A. Use static routes
  B. Use administrative profiles
  C. Use trusted hosts
  D. Use secure protocols
  C. Use trusted hosts

• Question 4:

  Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

  A. FortiView
  B. Event Management
  C. Device Manger
  D. Reporting
  B. Event Management

• Question 5:

  In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

  A. Remote logging must be enabled on FortiGate
  B. Log encryption must be enabled
  C. ADOMs must be enabled
  D. FortiGate must be registered with FortiAnalyzer
  A. Remote logging must be enabled on FortiGate
  D. FortiGate must be registered with FortiAnalyzer

  ---

  explanation:

  Pg 70: "after you add and register a FortiGate device with the FortiAnalyzer unit, you must also ensure that the FortiGate device is configured to send logs to the FortiAnalyzer unit."

  https://docs.fortinet.com/uploaded/files/4614/FortiAnalyzer-5.4.6-Administration%20Guide.pdf

  Pg 45: "ADOMs must be enabled to support the logging and reporting of NON- FORTIGATE devices, such as FortiCarrier, FortiClientEMS, FortiMail, FortiWeb, FortiCache, and FortiSandbox."

• Question 6:

  You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.

  What does the disk quota refer to?

  A. The maximum disk utilization for each device in the ADOM
  B. The maximum disk utilization for the FortiAnalyzer model
  C. The maximum disk utilization for the ADOM type
  D. The maximum disk utilization for all devices in the ADOM
  B. The maximum disk utilization for the FortiAnalyzer model

• Question 7:

  What is the purpose of a dataset query in FortiAnalyzer?

  A. It sorts log data into tables
  B. It extracts the database schema
  C. It retrieves log data from the database
  D. It injects log data into the database
  C. It retrieves log data from the database

• Question 8:

  After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

  execute sql-local rebuild-adom

  A. To reset the disk quota enforcement to default
  B. To remove the analytics logs of the device from the old database
  C. To migrate the archive logs to the new ADOM
  D. To populate the new ADOM with analytical logs for the moved device, so you can run reports
  B. To remove the analytics logs of the device from the old database

  ---

  explanation:

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.0.2/cli-reference/551596/sql-local

• Question 9:

  How do you restrict an administrator's access to a subset of your organization's ADOMs?

  A. Set the ADOM mode to Advanced
  B. Assign the ADOMs to the administrator's account
  C. Configure trusted hosts
  D. Assign the default Super_User administrator profile
  B. Assign the ADOMs to the administrator's account

• Question 10:

  FortiAnalyzer centralizes which functions? (Choose three)

  A. Network analysis
  B. Graphical reporting
  C. Content archiving / data mining
  D. Vulnerability assessment
  E. Security log analysis / forensics
  B. Graphical reporting
  C. Content archiving / data mining
  E. Security log analysis / forensics