Fortinet Fortinet Certifications NSE5_FAZ-6.4 Questions & Answers

• Question 71:

  What purposes does the auto-cache setting on reports serve? (Choose two.)

  A. To reduce report generation time

  B. To automatically update the hcache when new logs arrive

  C. To reduce the log insert lag rate

  D. To provide diagnostics on report generation time

  Correct Answer: AB

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.0.0/administration-guide/282280/enablingautocache

• Question 72:

  An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email.

  What could be the problem?

  A. Fortinet is assigned the Standard_ User administrator profile.

  B. A trusted host is configured.

  C. ADOM mode is configured with Advanced mode.

  D. Fortinet is assigned the Restricted_ User administrator profile.

  Correct Answer: A

• Question 73:

  What are analytics logs on FortiAnalyzer?

  A. Log type Traffic logs.

  B. Logs that roll over when the log file reaches a specific size.

  C. Logs that are indexed and stored in the SQL.

  D. Raw logs that are compressed and saved to a log file.

  Correct Answer: C

• Question 74:

  Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

  A. FortiAnalyzer HA can function without VRRP. and VRRP is required only if you have more than two FortiAnalyzer devices in a cluster.

  B. FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.

  C. All devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.

  D. FortiAnalyzer HA implementation is supported by many public cloud infrastructures such as AWS, Microsoft Azure, and Google Cloud.

  Correct Answer: BC

  Reference: https://help.fortinet.com/fa/faz50hlp/60/6-0-2/Content/FMG-FAZ/4600_HA/0000_HA.htm? TocPath=High%20Availability%7C_____0

• Question 75:

  FortiAnalyzer centralizes which functions? (Choose three)

  A. Network analysis

  B. Graphical reporting

  C. Content archiving / data mining

  D. Vulnerability assessment

  E. Security log analysis / forensics

  Correct Answer: BCE

• Question 76:

  Consider the CLI command: What is the purpose of the command?

  

  A. To add a unique tag to each log to prove that it came from this FortiAnalyzer

  B. To add the MD5 hash value and authentication code

  C. To add a log file checksum

  D. To encrypt log communications

  Correct Answer: C

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/cli-reference/849211/global

• Question 77:

  Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

  A. License type

  B. Disk size

  C. Total quota

  D. RAID level

  Correct Answer: BD

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/368682/disk-space-allocation

• Question 78:

  What is the purpose of the following CLI command?

  

  A. To add a log file checksum

  B. To add the MD's hash value and authentication code

  C. To add a unique tag to each log to prove that it came from this FortiAnalyzer

  D. To encrypt log communications

  Correct Answer: A

  https://docs2.fortinet.com/document/fortianalyzer/6.0.3/cli-reference/849211/global

• Question 79:

  An administrator has moved FortiGate A from the root ADOM to ADOM1. Which two statements are true regarding logs? (Choose two.)

  A. Analytics logs will be moved to ADOM1 from the root ADOM automatically.

  B. Archived logs will be moved to ADOM1 from the root ADOM automatically.

  C. Logs will be presented in both ADOMs immediately after the move.

  D. Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the ADOM1 SQL database.

  Correct Answer: BD

  Reference: https://community.fortinet.com/t5/Fortinet-Forum/FW-Migration-between-ADOMs/m-p/32683? m=158008

• Question 80:

  Refer to the exhibit.

  

  Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

  A. Report size will be optimized to conserve disk space on FortiAnalyzer.

  B. Reports will be cached in the memory.

  C. This feature is automatically enabled for scheduled reports.

  D. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.

  Correct Answer: CD

  Reference: https://help.fortinet.com/fa/faz50hlp/56/5-6-2/FMG-FAZ/2300_Reports/0025_Auto-cache.htm