Fortinet Fortinet Other Certification NSE5_FAZ-6.2 Questions & Answers

• Question 21:

  In FortiAnalyzer's FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

  A. Configure local DNS servers on FortiAnalyzer

  B. Resolve IPs on FortiGate

  C. Configure # set resolve-ip enable in the system FortiView settings

  D. Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

  Correct Answer: B

• Question 22:

  What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

  A. The log file is stored as a raw log and is available for analytic support.

  B. The log file rolls over and is archived.

  C. The log file is purged from the database.

  D. The log file is overwritten.

  Correct Answer: B

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/6d9f8fb5-6cf4-11e9-81a400505692583a/FortiAnalyzer-6.0.5-Administration-Guide.pdf

• Question 23:

  FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for

  analytics logs is 60 days.

  What is the most likely problem?

  A. Quota enforcement is acting on analytical data before a report is complete

  B. Logs are rolling before the report is run

  C. CPU resources are too high

  D. Disk utilization for archive logs is set for 15 days

  Correct Answer: A

  Reference: https://forum.fortinet.com/tm.aspx?m=138806

• Question 24:

  What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

  A. SFTP, FTP, or SCP server

  B. Mail server

  C. Output profile

  D. Report scheduling

  Correct Answer: AC

• Question 25:

  Consider the CLI command:

  

  What is the purpose of the command?

  A. To add a unique tag to each log to prove that it came from this FortiAnalyzer

  B. To add the MD5 hash value and authentication code

  C. To add a log file checksum

  D. To encrypt log communications

  Correct Answer: B

  Reference: https://docs2.fortinet.com/document/fortianalyzer/6.0.3/cli-reference/849211/global

• Question 26:

  What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

  A. Chart Builder

  B. Export to Report Chart

  C. Dataset Library

  D. Custom View

  Correct Answer: A

• Question 27:

  For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

  A. Use DNS

  B. Use host name resolution

  C. Use real-time forwarding

  D. Use an NTP server

  Correct Answer: D

• Question 28:

  What can the CLI command # diagnose test application oftpd 3 help you to determine?

  A. What devices and IP addresses are connecting to FortiAnalyzer

  B. What logs, if any, are reaching FortiAnalyzer

  C. What ADOMs are enabled and configured

  D. What devices are registered and unregistered

  Correct Answer: A

• Question 29:

  Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

  A. Antivirus logs

  B. Web filter logs

  C. IPS logs

  D. Application control logs

  Correct Answer: B

  Reference: https://help.fortinet.com/fa/faz50hlp/60/6-0-2/Content/ FortiAnalyzer_Admin_Guide/3600_FortiView/0200_Using_FortiView/1200_Compromised_ hosts_page.htm?TocPath=FortiView%7CUsing%20FortiView%7C_____6

• Question 30:

  What are two advantages of setting up fabric ADOM? (Choose two.)

  A. It can be used for fast data processing and log correlation

  B. It can be used to facilitate communication between devices in same Security Fabric

  C. It can include all Fortinet devices that are part of the same Security Fabric

  D. It can include only FortiGate devices that are part of the same Security Fabric

  Correct Answer: AD

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/448471/creatingasecurity-fabric-adom