Fortinet Fortinet Certifications NSE5_FAZ-6.4 Questions & Answers

• Question 81:

  What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

  A. SFTP, FTP, or SCP server

  B. Mail server

  C. Output profile

  D. Report scheduling

  Correct Answer: BC

  https://docs.fortinet.com/document/fortianalyzer/6.0.2/administration-guide/598322/creating-output-profiles

• Question 82:

  Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

  A. FortiView

  B. Event Management

  C. Device Manger

  D. Reporting

  Correct Answer: B

• Question 83:

  For which two purposes would you use the command set log checksum? (Choose two.)

  A. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server

  B. To prevent log modification or tampering

  C. To encrypt log communications

  D. To send an identical set of logs to a second logging server

  Correct Answer: AB

• Question 84:

  Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

  A. FROM

  B. LIMIT

  C. WHERE

  D. ORDER BY

  Correct Answer: A

  https://kb.fortinet.com/kb/documentLink.do?externalID=FD48500

• Question 85:

  You need to upgrade your FortiAnalyzer firmware.

  What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

  A. FortiAnalyzer uses log fetching to retrieve the logs when back online

  B. FortiGate uses the miglogd process to cache the logs

  C. The logfiled process stores logs in offline mode

  D. Logs are dropped

  Correct Answer: B

• Question 86:

  By default, what happens when a log file reaches its maximum file size?

  A. FortiAnalyzer overwrites the log files.

  B. FortiAnalyzer stops logging.

  C. FortiAnalyzer rolls the active log by renaming the file.

  D. FortiAnalyzer forwards logs to syslog.

  Correct Answer: C

• Question 87:

  You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

  A. FortiAnalyzer resets the disk quota of the new ADOM to default.

  B. FortiAnalyzer migrates archive logs to the new ADOM.

  C. FortiAnalyzer migrates analytics logs to the new ADOM.

  D. FortiAnalyzer removes logs from the old ADOM.

  Correct Answer: C

  https://kb.fortinet.com/kb/documentLink.do?externalID=FD40383

• Question 88:

  Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)

  A. Mail server

  B. Output profile

  C. SFTP server

  D. Report scheduling

  Correct Answer: AB

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.0.2/administration- guide/598322/creatingoutput-profiles

• Question 89:

  Which two statements express the advantages of grouping similar reports? (Choose two.)

  A. Improve report completion time.

  B. Conserve disk space on FortiAnalyzer by grouping multiple similar reports.

  C. Reduce the number of hcache tables and improve auto-hcache completion time.

  D. Provides a better summary of reports.

  Correct Answer: AC

• Question 90:

  Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.

  What is the most likely problem?

  A. CPU resources are too high

  B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

  C. The total disk space is insufficient and you need to add other disk

  D. The ADOM disk quota is set too low, based on log rates

  Correct Answer: D

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/1100_Storage/0017_Deleted%20device %20logs.htm