Fortinet Fortinet Other Certification NSE5_FAZ-6.2 Questions & Answers

• Question 31:

  You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

  A. FortiAnalyzer resets the disk quota of the new ADOM to default.

  B. FortiAnalyzer migrates archive logs to the new ADOM.

  C. FortiAnalyzer migrates analytics logs to the new ADOM.

  D. FortiAnalyzer removes logs from the old ADOM.

  Correct Answer: C

• Question 32:

  You need to upgrade your FortiAnalyzer firmware.

  What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

  A. FortiAnalyzer uses log fetching to retrieve the logs when back online

  B. FortiGate uses the miglogd process to cache the logs

  C. The logfiled process stores logs in offline mode

  D. Logs are dropped

  Correct Answer: B

• Question 33:

  Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

  A. To properly correlate logs

  B. To use real-time forwarding

  C. To resolve host names

  D. To improve DNS response times

  Correct Answer: A

• Question 34:

  What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

  A. Log correlation

  B. Host name resolution

  C. Log collection

  D. Real-time forwarding

  Correct Answer: D

• Question 35:

  Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

  A. A local wildcard administrator account

  B. A remote LDAP server

  C. A trusted host profile that restricts access to the LDAP group

  D. An administrator group

  Correct Answer: AB

  Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD38567

• Question 36:

  Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

  A. FROM

  B. LIMIT

  C. WHERE

  D. ORDER BY

  Correct Answer: C

  Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD48500

• Question 37:

  On the RAID management page, the disk status is listed as Initializing.

  What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

  A. FortiAnalyzer is ensuring that the parity data of a redundant drive is valid

  B. FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state

  C. FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant

  D. FortiAnalyzer is functioning normally

  Correct Answer: C

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/4cb0dce6-dbef-11e9-897700505692583a/FortiAnalyzer-5.6.10-Administration-Guide.pdf (40)

• Question 38:

  What is the purpose of a predefined template on the FortiAnalyzer?

  A. It can be edited and modified as required

  B. It specifies the report layout which contains predefined texts, charts, and macros

  C. It specifies report settings which contains time period, device selection, and schedule

  D. It contains predefined data to generate mock reports

  Correct Answer: B

  Reference: https://help.fortinet.com/fa/faz50hlp/56/5-6-2/ FMGFAZ/2300_Reports/0010_Predefined_reports.htm#:~:text=FortiAnalyzer%20includes%20a% 20number%20of,create%20and%2For%20build%20reports.andtext=A%20template%20populates%20the % 20Layout,that%20is%20to%20be%20created.

• Question 39:

  For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

  A. Principal

  B. Service provider

  C. Identity collector

  D. Identity provider

  Correct Answer: BD

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.2.0/new-features/957811/samladminauthentication#:~:text=for%20the%20administrator.- ,FortiAnalyzer%20can%20play%20the%20role %20of%20the%20identity%20provider%20(IdP,external%20identity%20provider%20is%20available

• Question 40:

  Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

  A. Log upload

  B. Indicators of Compromise

  C. Log forwarding an aggregation mode

  D. Log fetching

  Correct Answer: D