Fortinet Fortinet Certifications NSE5_FAZ-6.4 Questions & Answers

• Question 61:

  What is Log Insert Lag Time on FortiAnalyzer?

  A. The number of times in the logs where end users experienced slowness while accessing resources.

  B. The amount of lag time that occurs when the administrator is rebuilding the ADOM database.

  C. The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.

  D. The amount of time FortiAnalyzer takes to receive logs from a registered device

  Correct Answer: C

• Question 62:

  Which two statement are true regardless initial Logs sync and Log Data Sync for Ha on FortiAnalyzer?

  A. By default, Log Data Sync is disabled on all backup devise.

  B. Log Data Sync provides real-time log synchronization to all backup devices.

  C. With initial Logs Sync, when you add a unit to an HA cluster, the primary device synchronizes its logs with the backup device.

  D. When Logs Data Sync is turned on, the backup device will reboot and then rebuilt the log database with the synchronized logs.

  Correct Answer: CD

• Question 63:

  Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

  A. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end.

  B. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version.

  C. Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.

  D. Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device.

  Correct Answer: BD

  Reference: https://docs.fortinet.com/document/fortianalyzer/7.0.1/administration-guide/651442/fetchermanagement

• Question 64:

  A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.

  What can you do on FortiAnalyzer to accomplish this?

  A. Click FortiView and generate a report for that administrator.

  B. Click Task Monitor and view the tasks performed by that administrator.

  C. Click Log View and generate a report for that administrator.

  D. View the tasks performed by the rogue administrator in Fabric View.

  Correct Answer: B

  Reference: https://docs.fortinet.com/document/fortimanager/6.4.1/administration-guide/792943/taskmonitor

• Question 65:

  View the exhibit.

  

  Why is the total quota less than the total system storage?

  A. 3.6% of the system storage is already being used.

  B. Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files

  C. The oftpd process has not archived the logs yet

  D. The logfiled process is just estimating the total quota

  Correct Answer: B

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/368682/disk-space-allocation

• Question 66:

  Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

  A. Virtual domains

  B. Administrative access profiles

  C. Trusted hosts

  D. Security Fabric

  Correct Answer: BC

  Reference: https://docs2.fortinet.com/document/fortianalyzer/6.0.0/administration-guide/219292/administrator-profiles https://docs2.fortinet.com/document/fortianalyzer/6.0.0/administration-guide/581222/trusted-hosts

• Question 67:

  Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

  A. Log upload

  B. Indicators of Compromise

  C. Log forwarding an aggregation mode

  D. Log fetching

  Correct Answer: D

  https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/651442/fetcher-management

• Question 68:

  Which statements are correct regarding FortiAnalyzer reports? (Choose two)

  A. FortiAnalyzer provides the ability to create custom reports.

  B. FortiAnalyzer glows you to schedule reports to run.

  C. FortiAnalyzer includes pre-defined reports only.

  D. FortiAnalyzer allows reporting for FortiGate devices only.

  Correct Answer: AB

• Question 69:

  What are two advantages of setting up fabric ADOM? (Choose two.)

  A. It can be used for fast data processing and log correlation

  B. It can be used to facilitate communication between devices in same Security Fabric

  C. It can include all Fortinet devices that are part of the same Security Fabric

  D. It can include only FortiGate devices that are part of the same Security Fabric

  Correct Answer: AC

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/448471/creating-a-securityfabric-adom

• Question 70:

  Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

  A. In aggregation mode, you can forward logs to syslog and CEF servers as well.

  B. Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.

  C. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.

  D. Both modes, forwarding and aggregation, support encryption of logs between devices.

  Correct Answer: BC

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.2.0/cookbook/63238/what-is-the-differencebetween-log-forward-and-log-aggregation-modes