Fortinet NSE5_FAZ-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-6.4 Online Questions & Answers

• Question 81:

  Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

  A. Log upload
  B. Indicators of Compromise
  C. Log forwarding an aggregation mode
  D. Log fetching
  D. Log fetching

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/651442/fetcher-management

• Question 82:

  For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

  A. Principal
  B. Service provider
  C. Identity collector
  D. Identity provider
  B. Service provider
  D. Identity provider

  ---

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/981386/saml-admin-authentication

• Question 83:

  What is the purpose of a predefined template on the FortiAnalyzer?

  A. It can be edited and modified as required
  B. It specifies the report layout which contains predefined texts, charts, and macros
  C. It specifies report settings which contains time period, device selection, and schedule
  D. It contains predefined data to generate mock reports
  B. It specifies the report layout which contains predefined texts, charts, and macros

  ---

  Reference:

  https://help.fortinet.com/fa/faz50hlp/56/5-6-2/FMGFAZ/2300_Reports/0010_Predefined_reports.htm#:~:text=FortiAnalyzer%20includes%20a%20number%20of,create%20and%2For%20build%20reports.andtext=A%20template%20populates%

  20the %20Layout,that%20is%20to%20be%20created.

  https://help.fortinet.com/fa/faz50hlp/56/5-6-2/FMG- FAZ/2300_Reports/0010_Predefined_reports.htm

  https://docs2.fortinet.com/document/fortianalyzer/6.0.8/administration- guide/618245/predefined-reports-templates-charts-and-macros

• Question 84:

  Which two purposes does the auto cache setting on reports serve? (Choose two.)

  A. It automatically updates the hcache when new logs arrive.
  B. It provides diagnostics on report generation time.
  C. It reduces the log insert lag rate.
  D. It reduces report generation time.
  A. It automatically updates the hcache when new logs arrive.
  D. It reduces report generation time.

  ---

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/384416/how-auto-cache-works https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/86926/enabling-auto-cache

• Question 85:

  What is the recommended method of expanding disk space on a FortiAnalyzer VM?

  A. From the VM host manager, add an additional virtual disk and use the #execute lvm extend command to expand the storage
  B. From the VM host manager, expand the size of the existing virtual disk
  C. From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk
  D. From the VM host manager, add an additional virtual disk and rebuild your RAID array
  A. From the VM host manager, add an additional virtual disk and use the #execute lvm extend command to expand the storage

  ---

  https://kb.fortinet.com/kb/documentLink.do?externalID=FD40848

• Question 86:

  Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

  A. FROM
  B. LIMIT
  C. WHERE
  D. ORDER BY
  A. FROM

  ---

  https://kb.fortinet.com/kb/documentLink.do?externalID=FD48500

• Question 87:

  What are the operating modes of FortiAnalyzer? (Choose two)

  A. Standalone
  B. Manager
  C. Analyzer
  D. Collector
  C. Analyzer
  D. Collector

• Question 88:

  Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

  A. Antivirus logs
  B. Web filter logs
  C. IPS logs
  D. Application control logs
  B. Web filter logs

  ---

  Reference:

  https://help.fortinet.com/fa/faz50hlp/60/6-0-2/Content/FortiAnalyzer_Admin_Guide/3600_FortiView/0200_Using_FortiView/1200_Compromised_ hosts_page.htm?TocPath=FortiView%7CUsing%20FortiView%7C_____6

• Question 89:

  Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

  A. SSL is the default setting.
  B. SSL communications are auto-negotiated between the two devices.
  C. SSL can send logs in real-time only.
  D. SSL encryption levels are globally set on FortiAnalyzer.
  E. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.
  A. SSL is the default setting.
  D. SSL encryption levels are globally set on FortiAnalyzer.

• Question 90:

  Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy. What is the most likely problem?

  A. CPU resources are too high
  B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device
  C. The total disk space is insufficient and you need to add other disk
  D. The ADOM disk quota is set too low, based on log rates
  D. The ADOM disk quota is set too low, based on log rates

  ---

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/1100_Storage/0017_Deleted%20device%20logs.htm