Fortinet NSE5_FAZ-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-6.4 Online Questions & Answers

• Question 11:

  By default, what happens when a log file reaches its maximum file size?

  A. FortiAnalyzer overwrites the log files.
  B. FortiAnalyzer stops logging.
  C. FortiAnalyzer rolls the active log by renaming the file.
  D. FortiAnalyzer forwards logs to syslog.
  C. FortiAnalyzer rolls the active log by renaming the file.

• Question 12:

  What are offline logs on FortiAnalyzer?

  A. Compressed logs, which are also known as archive logs, are considered to be offline logs.
  B. When you restart FortiAnalyzer. all stored logs are considered to be offline logs.
  C. Logs that are indexed and stored in the SQL database.
  D. Logs that are collected from offline devices after they boot up.
  A. Compressed logs, which are also known as archive logs, are considered to be offline logs.

  ---

  Reference: https://help.fortinet.com/fa/faz50hlp/56/5-6-6/Content/FortiAnalyzer_Admin_Guide/0300_Key_concepts/0600_Log_Storage/0400_Arch ive_analytics_logs.htm

• Question 13:

  Which daemon is responsible for enforcing raw log file size?

  A. logfiled
  B. oftpd
  C. sqlplugind
  D. miglogd
  A. logfiled

• Question 14:

  Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

  A. A local wildcard administrator account
  B. A remote LDAP server
  C. A trusted host profile that restricts access to the LDAP group
  D. An administrator group
  A. A local wildcard administrator account
  B. A remote LDAP server

  ---

  Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD38567

• Question 15:

  What is the purpose of a dataset query in FortiAnalyzer?

  A. It sorts log data into tables
  B. It extracts the database schema
  C. It retrieves log data from the database
  D. It injects log data into the database
  C. It retrieves log data from the database

  ---

  Reference: https://docs2.fortinet.com/document/fortianalyzer/6.0.4/administration-guide/148744/creating-datasets

• Question 16:

  View the exhibit.

  

  Why is the total quota less than the total system storage?

  A. 3.6% of the system storage is already being used.
  B. Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files
  C. The oftpd process has not archived the logs yet
  D. The logfiled process is just estimating the total quota
  B. Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/368682/disk-space-allocation

• Question 17:

  An administrator has configured the following settings:

  config system fortiview settings set resolve-ip enable end

  What is the significance of executing this command?

  A. Use this command only if the source IP addresses are not resolved on FortiGate.
  B. It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.
  C. You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.
  D. It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.
  D. It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

  ---

  Reference: https://community.fortinet.com/t5/Fortinet-Forum/Hostnames-in-FortiAnalyzer/m-p/95351?m=156950

• Question 18:

  What is the purpose of the following CLI command?

  

  A. To add a log file checksum
  B. To add the MD's hash value and authentication code
  C. To add a unique tag to each log to prove that it came from this FortiAnalyzer
  D. To encrypt log communications
  A. To add a log file checksum

  ---

  https://docs2.fortinet.com/document/fortianalyzer/6.0.3/cli-reference/849211/global

• Question 19:

  What is Log Insert Lag Time on FortiAnalyzer?

  A. The number of times in the logs where end users experienced slowness while accessing resources.
  B. The amount of lag time that occurs when the administrator is rebuilding the ADOM database.
  C. The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.
  D. The amount of time FortiAnalyzer takes to receive logs from a registered device
  C. The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.

• Question 20:

  Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

  A. FortiAnalyzer HA can function without VRRP. and VRRP is required only if you have more than two FortiAnalyzer devices in a cluster.
  B. FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.
  C. All devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.
  D. FortiAnalyzer HA implementation is supported by many public cloud infrastructures such as AWS, Microsoft Azure, and Google Cloud.
  B. FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.
  C. All devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.

  ---

  Reference: https://help.fortinet.com/fa/faz50hlp/60/6-0-2/Content/FMG-FAZ/4600_HA/0000_HA.htm?TocPath=High%20Availability%7C_____0