NSE5_FAZ-6.4 Exam Details

  • Exam Code
    :NSE5_FAZ-6.4
  • Exam Name
    :Fortinet NSE 5 - FortiAnalyzer 6.4
  • Certification
    :Fortinet Certifications
  • Vendor
    :Fortinet
  • Total Questions
    :94 Q&As
  • Last Updated
    :Jul 12, 2026

Fortinet NSE5_FAZ-6.4 Online Questions & Answers

  • Question 1:

    Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

    A. The total disk space is insufficient and you need to add other disk.
    B. CPU resources are too high.
    C. The ADOM disk quota is set too low based on log rates.
    D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.

  • Question 2:

    What is the purpose of employing RAID with FortiAnalyzer?

    A. To introduce redundancy to your log data
    B. To provide data separation between ADOMs
    C. To separate analytical and archive data
    D. To back up your logs

  • Question 3:

    On the RAID management page, the disk status is listed as Initializing.

    What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

    A. FortiAnalyzer is ensuring that the parity data of a redundant drive is valid
    B. FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state
    C. FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant
    D. FortiAnalyzer is functioning normally

  • Question 4:

    What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

    A. All FortiGates can send logs to FortiAnalyzer using the store and upload option.
    B. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.
    C. Both secure communications methods (SSL and IPsec) allow the store and upload option.
    D. Disk logging is enabled on the FortiGate through the CLI only.
    E. Disk logging is enabled by default on the FortiGate.

  • Question 5:

    Which statement is true regarding Macros on FortiAnalyzer?

    A. Macros are ADOM specific and each ADOM will have unique macros relevant to that ADOM.
    B. Macros are supported only on the FortiGate ADOM.
    C. Macros are useful in generating excel log files automatically based on the reports settings.
    D. Macros are predefined templates for reports and cannot be customized.

  • Question 6:

    What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

    A. The log file is stored as a raw log and is available for analytic support.
    B. The log file rolls over and is archived.
    C. The log file is purged from the database.
    D. The log file is overwritten.

  • Question 7:

    Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

    A. Virtual domains
    B. Administrative access profiles
    C. Trusted hosts
    D. Security Fabric

  • Question 8:

    Which two statements are true regarding fabric connectors? (Choose two.)

    A. Configuring fabric connectors to send notification to ITSM platform upon incident creation Is more efficient than third-party information from the FortiAnalyzer API.
    B. Fabric connectors allow to save storage costs and improve redundancy.
    C. Storage connector service does not require a separate license to send logs to cloud platform.
    D. Cloud-Out connections allow you to send real-time logs to pubic cloud accounts like Amazon S3, Azure Blob , and Google Cloud.

  • Question 9:

    An administrator has configured the following settings:

    config system global set log-checksum md5-auth end

    What is the significance of executing this command?

    A. This command records the log file MD5 hash value.
    B. This command records passwords in log files and encrypts them.
    C. This command encrypts log transfer between FortiAnalyzer and other devices.
    D. This command records the log file MD5 hash value and authentication code.

  • Question 10:

    Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

    A. SMS
    B. Email
    C. SNMP
    D. IM

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Fortinet exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your NSE5_FAZ-6.4 exam preparations and Fortinet certification application, do not hesitate to visit our Vcedump.com to find your solutions here.