1. Home
  2. Fortinet
  3. NSE5_FAZ-6.4

Fortinet NSE5_FAZ-6.4 Online Practice Questions and Exam Preparation

NSE5_FAZ-6.4 Exam Details

  • Exam Code
    :NSE5_FAZ-6.4
  • Exam Name
    :Fortinet NSE 5 - FortiAnalyzer 6.4
  • Certification
    :Fortinet Certifications
  • Vendor
    :Fortinet
  • Total Questions
    :94 Q&As
  • Last Updated
    :May 31, 2026

Fortinet NSE5_FAZ-6.4 Online Questions & Answers

  • Question 71:

    What does the disk status Degraded mean for RAID management?

    A. One or more drives are missing from the FortiAnalyzer unit. The drive is no longer available to the operating system.
    B. The FortiAnalyzer device is writing to all the hard drives on the device in order to make the array fault tolerant.
    C. The FortiAnalyzer device is writing data to a newly added hard drive in order to restore the hard drive to an optimal state.
    D. The hard drive Is no longer being used by the RAID controller

  • Question 72:

    On FortiAnalyzer, what is a wildcard administrator account?

    A. An account that permits access to members of an LDAP group
    B. An account that allows guest access with read-only privileges
    C. An account that requires two-factor authentication
    D. An account that validates against any user account on a FortiAuthenticator

  • Question 73:

    Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

    A. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end.
    B. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version.
    C. Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.
    D. Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device.

  • Question 74:

    You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

    A. FortiAnalyzer resets the disk quota of the new ADOM to default.
    B. FortiAnalyzer migrates archive logs to the new ADOM.
    C. FortiAnalyzer migrates analytics logs to the new ADOM.
    D. FortiAnalyzer removes logs from the old ADOM.

  • Question 75:

    If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

    A. Hot swap the disk
    B. Replace the disk and rebuild the RAID manually
    C. Take no action if the RAID level supports a failed disk
    D. Shut down FortiAnalyzer and replace the disk

  • Question 76:

    What are two advantages of setting up fabric ADOM? (Choose two.)

    A. It can be used for fast data processing and log correlation
    B. It can be used to facilitate communication between devices in same Security Fabric
    C. It can include all Fortinet devices that are part of the same Security Fabric
    D. It can include only FortiGate devices that are part of the same Security Fabric

  • Question 77:

    FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

    A. To upload logs to an SFTP server
    B. To prevent log modification during backup
    C. To send an identical set of logs to a second logging server
    D. To encrypt log communication between devices

  • Question 78:

    Which two statements about log forwarding are true? (Choose two.)

    A. Forwarded logs cannot be filtered to match specific criteria.
    B. Logs are forwarded in real-time only.
    C. The client retains a local copy of the logs after forwarding.
    D. You can use aggregation mode only with another FortiAnalyzer.

  • Question 79:

    Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

    A. To properly correlate logs
    B. To use real-time forwarding
    C. To resolve host names
    D. To improve DNS response times

  • Question 80:

    You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.

    What is the recommended method to replace the disk?

    A. Shut down FortiAnalyzer and then replace the disk
    B. Downgrade your RAID level, replace the disk, and then upgrade your RAID level
    C. Clear all RAID alarms and replace the disk while FortiAnalyzer is still running
    D. Perform a hot swap

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Fortinet exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your NSE5_FAZ-6.4 exam preparations and Fortinet certification application, do not hesitate to visit our Vcedump.com to find your solutions here.