Fortinet Fortinet Other Certification NSE5_FAZ-6.2 Questions & Answers

• Question 1:

  In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

  How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

  A. Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve

  B. Configure # set resolve-ip enable in the system FortiView settings

  C. Configure local DNS servers on FortiAnalyzer

  D. Resolve IP addresses on FortiGate

  Correct Answer: B

  Reference: https://forum.fortinet.com/tm.aspx?m=156950

• Question 2:

  What FortiGate process caches logs when FortiAnalyzer is not reachable?

  A. logfiled

  B. sqlplugind

  C. oftpd

  D. miglogd

  Correct Answer: D

  Reference: https://forum.fortinet.com/tm.aspx?m=143106

• Question 3:

  Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

  A. FortiView

  B. Event Management

  C. Device Manger

  D. Reporting

  Correct Answer: B

• Question 4:

  How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

  A. Use static routes

  B. Use administrative profiles

  C. Use trusted hosts

  D. Use secure protocols

  Correct Answer: C

• Question 5:

  You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.

  What does the disk quota refer to?

  A. The maximum disk utilization for each device in the ADOM

  B. The maximum disk utilization for the FortiAnalyzer model

  C. The maximum disk utilization for the ADOM type

  D. The maximum disk utilization for all devices in the ADOM

  Correct Answer: B

• Question 6:

  In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

  A. Remote logging must be enabled on FortiGate

  B. Log encryption must be enabled

  C. ADOMs must be enabled

  D. FortiGate must be registered with FortiAnalyzer

  Correct Answer: AD

  Pg 70: "after you add and register a FortiGate device with the FortiAnalyzer unit, you must also ensure that the FortiGate device is configured to send logs to the FortiAnalyzer unit." https://docs.fortinet.com/uploaded/files/4614/FortiAnalyzer-5.4.6-Administration%20Guide.pdf Pg 45: "ADOMs must be enabled to support the logging and reporting of NON- FORTIGATE devices, such as FortiCarrier, FortiClientEMS, FortiMail, FortiWeb, FortiCache, and FortiSandbox."

• Question 7:

  After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

  execute sql-local rebuild-adom

  A. To reset the disk quota enforcement to default

  B. To remove the analytics logs of the device from the old database

  C. To migrate the archive logs to the new ADOM

  D. To populate the new ADOM with analytical logs for the moved device, so you can run reports

  Correct Answer: B

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.0.2/cli-reference/551596/sql-local

• Question 8:

  What is the purpose of a dataset query in FortiAnalyzer?

  A. It sorts log data into tables

  B. It extracts the database schema

  C. It retrieves log data from the database

  D. It injects log data into the database

  Correct Answer: C

• Question 9:

  What are two of the key features of FortiAnalyzer? (Choose two.)

  A. Centralized log repository

  B. Cloud-based management

  C. Reports

  D. Virtual domains (VDOMs)

  Correct Answer: AC

• Question 10:

  What is the recommended method of expanding disk space on a FortiAnalyzer VM?

  A. From the VM host manager, add an additional virtual disk and use the #execute lvm extend command to expand the storage

  B. From the VM host manager, expand the size of the existing virtual disk

  C. From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk

  D. From the VM host manager, add an additional virtual disk and rebuild your RAID array

  Correct Answer: A