Fortinet Fortinet Certifications NSE5_FAZ-6.4 Questions & Answers

• Question 21:

  Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

  A. To properly correlate logs

  B. To use real-time forwarding

  C. To resolve host names

  D. To improve DNS response times

  Correct Answer: A

• Question 22:

  Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)

  A. ADOMs are enabled by default.

  B. ADOMs constrain other administrator's access privileges to a subset of devices in the device list.

  C. Once enabled, the Device Manager, FortiView, Event Management, and Reports tab display per ADOM.

  D. All administrators can create ADOMs--not just the admin administrator.

  Correct Answer: BC

• Question 23:

  What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

  A. Log correlation

  B. Host name resolution

  C. Log collection

  D. Real-time forwarding

  Correct Answer: A

• Question 24:

  Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

  A. SMS

  B. Email

  C. SNMP

  D. IM

  Correct Answer: BC

  Reference: https://help.fortinet.com/fa/faz50hlp/60/6-0-2/Content/ FortiAnalyzer_Admin_Guide/1800_Events/0200_Event_handlers/0600_Create_event_han dlers.htm

• Question 25:

  What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

  A. RADIUS

  B. Local

  C. LDAP

  D. PKI

  E. TACACS+

  Correct Answer: ACE

• Question 26:

  Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

  A. Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto- negotiated.

  B. Must establish an IPsec tunnel ID and pre-shared key.

  C. IPsec cannot be enabled if SSL is enabled as well.

  D. IPsec is only enabled through the CLI on FortiAnalyzer.

  Correct Answer: C

• Question 27:

  FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.

  What is the most likely problem?

  A. Quota enforcement is acting on analytical data before a report is complete

  B. Logs are rolling before the report is run

  C. CPU resources are too high

  D. Disk utilization for archive logs is set for 15 days

  Correct Answer: B

  Reference: https://forum.fortinet.com/tm.aspx?m=138806

• Question 28:

  Refer to the exhibit.

  

  What is the purpose of using the Chart Builder feature on FortiAnalyzer?

  A. In Log View, this feature allows you to build a dataset and chart automatically, based on the filtered search results.

  B. In Log View, this feature allows you to build a chart and chart automatically, on the top 100 log entries.

  C. This feature allows you to build a chart under FortiView.

  D. You can add charts to generated reports using this feature.

  Correct Answer: A

• Question 29:

  How do you restrict an administrator's access to a subset of your organization's ADOMs?

  A. Set the ADOM mode to Advanced

  B. Assign the ADOMs to the administrator's account

  C. Configure trusted hosts

  D. Assign the default Super_User administrator profile

  Correct Answer: B

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/717578/assigningadministrators-to-an-adom

• Question 30:

  FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

  A. To upload logs to an SFTP server

  B. To prevent log modification during backup

  C. To send an identical set of logs to a second logging server

  D. To encrypt log communication between devices

  Correct Answer: D