Fortinet NSE5_FAZ-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-6.4 Online Questions & Answers

• Question 21:

  What can the CLI command # diagnose test application oftpd 3 help you to determine?

  A. What devices and IP addresses are connecting to FortiAnalyzer
  B. What logs, if any, are reaching FortiAnalyzer
  C. What ADOMs are enabled and configured
  D. What devices are registered and unregistered
  A. What devices and IP addresses are connecting to FortiAnalyzer

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/cli- reference/395556/test#test_application

• Question 22:

  Which statements are correct regarding FortiAnalyzer reports? (Choose two)

  A. FortiAnalyzer provides the ability to create custom reports.
  B. FortiAnalyzer glows you to schedule reports to run.
  C. FortiAnalyzer includes pre-defined reports only.
  D. FortiAnalyzer allows reporting for FortiGate devices only.
  A. FortiAnalyzer provides the ability to create custom reports.
  B. FortiAnalyzer glows you to schedule reports to run.

• Question 23:

  Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

  A. FortiView
  B. Event Management
  C. Device Manger
  D. Reporting
  B. Event Management

• Question 24:

  Refer to the exhibit.

  

  The exhibit shows "remoteservergroup" is an authentication server group with LDAP and RADIUS servers.

  Which two statements express the significance of enabling "Match all users on remote server" when configuring a new administrator? (Choose two.)

  A. It creates a wildcard administrator using LDAP and RADIUS servers.
  B. Administrator can log in to FortiAnalyzer using their credentials on remote servers LDAP and RADIUS.
  C. Use remoteadmin from LDAP and RADIUS servers will be able to log in to FortiAnalyzer at anytime.
  D. It allows administrators to use two-factor authentication.
  A. It creates a wildcard administrator using LDAP and RADIUS servers.
  B. Administrator can log in to FortiAnalyzer using their credentials on remote servers LDAP and RADIUS.

  ---

  Reference: https://docs.fortinet.com/document/fortimanager/7.0.1/administration-guide/858351/creating-administrators

• Question 25:

  Which two statement are true regardless initial Logs sync and Log Data Sync for Ha on FortiAnalyzer?

  A. By default, Log Data Sync is disabled on all backup devise.
  B. Log Data Sync provides real-time log synchronization to all backup devices.
  C. With initial Logs Sync, when you add a unit to an HA cluster, the primary device synchronizes its logs with the backup device.
  D. When Logs Data Sync is turned on, the backup device will reboot and then rebuilt the log database with the synchronized logs.
  C. With initial Logs Sync, when you add a unit to an HA cluster, the primary device synchronizes its logs with the backup device.
  D. When Logs Data Sync is turned on, the backup device will reboot and then rebuilt the log database with the synchronized logs.

• Question 26:

  How do you restrict an administrator's access to a subset of your organization's ADOMs?

  A. Set the ADOM mode to Advanced
  B. Assign the ADOMs to the administrator's account
  C. Configure trusted hosts
  D. Assign the default Super_User administrator profile
  B. Assign the ADOMs to the administrator's account

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/717578/assigning-administrators-to-an-adom

• Question 27:

  Which two statements express the advantages of grouping similar reports? (Choose two.)

  A. Improve report completion time.
  B. Conserve disk space on FortiAnalyzer by grouping multiple similar reports.
  C. Reduce the number of hcache tables and improve auto-hcache completion time.
  D. Provides a better summary of reports.
  A. Improve report completion time.
  C. Reduce the number of hcache tables and improve auto-hcache completion time.

• Question 28:

  In FortiAnalyzer's FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

  A. Configure local DNS servers on FortiAnalyzer
  B. Resolve IPs on FortiGate
  C. Configure # set resolve-ip enable in the system FortiView settings
  D. Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve
  B. Resolve IPs on FortiGate

• Question 29:

  FortiAnalyzer centralizes which functions? (Choose three)

  A. Network analysis
  B. Graphical reporting
  C. Content archiving / data mining
  D. Vulnerability assessment
  E. Security log analysis / forensics
  B. Graphical reporting
  C. Content archiving / data mining
  E. Security log analysis / forensics

• Question 30:

  In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

  A. Remote logging must be enabled on FortiGate
  B. Log encryption must be enabled
  C. ADOMs must be enabled
  D. FortiGate must be registered with FortiAnalyzer
  A. Remote logging must be enabled on FortiGate
  D. FortiGate must be registered with FortiAnalyzer

  ---

  Pg 70: "after you add and register a FortiGate device with the FortiAnalyzer unit, you must also ensure that the FortiGate device is configured to send logs to the FortiAnalyzer unit."

  https://docs.fortinet.com/uploaded/files/4614/FortiAnalyzer-5.4.6-Administration%20Guide.pdf

  Pg 45: "ADOMs must be enabled to support the logging and reporting of NON- FORTIGATE devices, such as FortiCarrier, FortiClientEMS, FortiMail, FortiWeb, FortiCache, and FortiSandbox."