Fortinet Fortinet Other Certification NSE5_FAZ-6.2 Questions & Answers

• Question 51:

  What statements are true regarding disk log quota? (Choose two) A. The FortiAnalyzer stops logging once the disk log quota is met.

  B. The FortiAnalyzer automatically sets the disk log quota based on the device.

  C. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.

  D. The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.

  Correct Answer: CD

• Question 52:

  Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)

  A. Mail server

  B. Output profile

  C. SFTP server

  D. Report scheduling

  Correct Answer: BC

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/6d9f8fb5-6cf4-11e9-81a400505692583a/FortiAnalyzer-6.0.5-Administration-Guide.pdf (119)

• Question 53:

  You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.

  What is the recommended method to replace the disk?

  A. Shut down FortiAnalyzer and then replace the disk

  B. Downgrade your RAID level, replace the disk, and then upgrade your RAID level

  C. Clear all RAID alarms and replace the disk while FortiAnalyzer is still running

  D. Perform a hot swap

  Correct Answer: D

  Reference: https://www.fortinetguru.com/2016/04/system-settings/6/

• Question 54:

  When you perform a system backup, what does the backup configuration contain? (Choose two.)

  A. Generated reports

  B. Device list

  C. Authorized devices logs

  D. System information

  Correct Answer: BD

• Question 55:

  View the exhibit:

  

  What does the 1000MB maximum for disk utilization refer to?

  A. The disk quota for the FortiAnalyzer model

  B. The disk quota for all devices in the ADOM

  C. The disk quota for each device in the ADOM

  D. The disk quota for the ADOM type

  Correct Answer: B

• Question 56:

  FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

  A. To upload logs to an SFTP server

  B. To prevent log modification during backup

  C. To send an identical set of logs to a second logging server

  D. To encrypt log communication between devices

  Correct Answer: D

• Question 57:

  What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

  A. RADIUS

  B. Local

  C. LDAP

  D. PKI

  E. TACACS+

  Correct Answer: ACE

• Question 58:

  What is the purpose of employing RAID with FortiAnalyzer?

  A. To introduce redundancy to your log data

  B. To provide data separation between ADOMs

  C. To separate analytical and archive data

  D. To back up your logs

  Correct Answer: A

• Question 59:

  Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.

  What is the most likely problem?

  A. CPU resources are too high

  B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

  C. The total disk space is insufficient and you need to add other disk

  D. The ADOM disk quota is set too low, based on log rates

  Correct Answer: D

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/1100_Storage/0017_Deleted%20device %20logs.htm

• Question 60:

  By default, what happens when a log file reaches its maximum file size?

  A. FortiAnalyzer overwrites the log files.

  B. FortiAnalyzer stops logging.

  C. FortiAnalyzer rolls the active log by renaming the file.

  D. FortiAnalyzer forwards logs to syslog.

  Correct Answer: C