Fortinet NSE5_FAZ-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-6.4 Online Questions & Answers

• Question 61:

  View the exhibit.

  

  What does the data point at 14:35 tell you?

  A. FortiAnalyzer is dropping logs.
  B. FortiAnalyzer is indexing logs faster than logs are being received.
  C. FortiAnalyzer has temporarily stopped receiving logs so older logs' can be indexed.
  D. The sqlplugind daemon is ahead in indexing by one log.
  B. FortiAnalyzer is indexing logs faster than logs are being received.

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/47690/insert-rate-vs-receive-rate-widget

• Question 62:

  What can you do on FortiAnalyzer to restrict administrative access from specific locations?

  A. Configure trusted hosts for that administrator.
  B. Enable geo-location services on accessible interface.
  C. Configure two-factor authentication with a remote RADIUS server.
  D. Configure an ADOM for respective location.
  A. Configure trusted hosts for that administrator.

  ---

  Reference: https://docs.fortinet.com/document/fortigate/6.2.0/hardening-your-fortigate/582009/system-administrator-best-practices

• Question 63:

  What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?(Choose two.)

  A. SFTP, FTP, or SCP server
  B. Mail server
  C. Output profile
  D. Report scheduling
  B. Mail server
  C. Output profile

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.0.2/administration-guide/598322/creating-output-profiles

• Question 64:

  What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

  A. Chart Builder
  B. Export to Report Chart
  C. Dataset Library
  D. Custom View
  A. Chart Builder

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.0/cookbook/989203/building-charts-with-chart-builder

• Question 65:

  Which two statements are true regarding ADOM modes? (Choose two.)

  A. You can only change ADOM modes through CLI.
  B. In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADOM.
  C. In an advanced mode ADOM. you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.
  D. Normal mode is the default ADOM mode.
  C. In an advanced mode ADOM. you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.
  D. Normal mode is the default ADOM mode.

  ---

  Reference: https://help.fortinet.com/fa/faz50hlp/56/5-6-1/FMG- FAZ/0800_ADOMs/0400_ADOM%20Device%20Modes.htm

• Question 66:

  What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

  A. RADIUS
  B. Local
  C. LDAP
  D. PKI
  E. TACACS+
  A. RADIUS
  C. LDAP
  E. TACACS+

• Question 67:

  Refer to the exhibit.

  

  What is the purpose of using the Chart Builder feature on FortiAnalyzer?

  A. In Log View, this feature allows you to build a dataset and chart automatically, based on the filtered search results.
  B. In Log View, this feature allows you to build a chart and chart automatically, on the top 100 log entries.
  C. This feature allows you to build a chart under FortiView.
  D. You can add charts to generated reports using this feature.
  A. In Log View, this feature allows you to build a dataset and chart automatically, based on the filtered search results.

• Question 68:

  Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

  A. License type
  B. Disk size
  C. Total quota
  D. RAID level
  B. Disk size
  D. RAID level

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/368682/disk-space-allocation

• Question 69:

  In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

  How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

  A. Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve
  B. Configure # set resolve-ip enable in the system FortiView settings
  C. Configure local DNS servers on FortiAnalyzer
  D. Resolve IP addresses on FortiGate
  D. Resolve IP addresses on FortiGate

  ---

  https://packetplant.com/fortigate-and-fortianalyzer-resolve-source-and-destination-ip/

  "As a best practice, it is recommended to resolve IPs on the FortiGate end. This is because you get both source and destination, and it offloads the work from FortiAnalyzer. On FortiAnalyzer, this IP resolution does destination IPs only"

• Question 70:

  If you upgrade the FortiAnalyzer firmware, which report element can be affected?

  A. Custom datasets
  B. Report scheduling
  C. Report settings
  D. Output profiles
  A. Custom datasets

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/upgrade-guide/669300/checking-reports