Fortinet Fortinet Certifications NSE5_FAZ-7.0 Questions & Answers

• Question 91:

  Which statements are correct regarding FortiAnalyzer reports? (Choose two)

  A. FortiAnalyzer provides the ability to create custom reports.

  B. FortiAnalyzer glows you to schedule reports to run.

  C. FortiAnalyzer includes pre-defined reports only.

  D. FortiAnalyzer allows reporting for FortiGate devices only.

  Correct Answer: AB

• Question 92:

  Refer to the exhibit.

  

  Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

  A. Report size will be optimized to conserve disk space on FortiAnalyzer.

  B. Reports will be cached in the memory.

  C. This feature is automatically enabled for scheduled reports.

  D. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.

  Correct Answer: CD

• Question 93:

  Refer to the exhibits.

  

  Page 306 of 7.0 study guide Reference: https://help.fortinet.com/fa/faz50hlp/56/5-6-2/FMG- FAZ/2300_Reports/0025_Auto-cache.htm

  How many events will be added to the incident created after running this playbook?

  A. Ten events will be added.

  B. No events will be added.

  C. Five events will be added.

  D. Thirteen events will be added.

  Correct Answer: C

• Question 94:

  Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

  A. Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto- negotiated.

  B. Must establish an IPsec tunnel ID and pre-shared key.

  C. IPsec cannot be enabled if SSL is enabled as well.

  D. IPsec is only enabled through the CLI on FortiAnalyzer.

  Correct Answer: AB

• Question 95:

  What statements are true regarding disk log quota? (Choose two)

  A. The FortiAnalyzer stops logging once the disk log quota is met.

  B. The FortiAnalyzer automatically sets the disk log quota based on the device.

  C. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.

  D. The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.

  Correct Answer: CD

• Question 96:

  What is the purpose of a dataset query in FortiAnalyzer?

  A. It sorts log data into tables

  B. It extracts the database schema

  C. It retrieves log data from the database

  D. It injects log data into the database

  Correct Answer: C

  Reference: https://docs2.fortinet.com/document/fortianalyzer/6.0.4/administration- guide/148744/creating-datasets

• Question 97:

  Refer to the exhibit.

  

  What is the purpose of using the Chart Builder feature on FortiAnalyzer?

  A. In Log View, this feature allows you to build a dataset and chart automatically, based on the filtered search results.

  B. In Log View, this feature allows you to build a chart and chart automatically, on the top 100 log entries.

  C. This feature allows you to build a chart under FortiView.

  D. You can add charts to generated reports using this feature.

  Correct Answer: A

• Question 98:

  Which daemon is responsible for enforcing raw log file size?

  A. logfiled

  B. oftpd

  C. sqlplugind

  D. miglogd

  Correct Answer: A

• Question 99:

  Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy. What is the most likely problem?

  A. CPU resources are too high

  B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

  C. The total disk space is insufficient and you need to add other disk

  D. The ADOM disk quota is set too low, based on log rates

  Correct Answer: D

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG- FAZ/1100_Storage/0017_Deleted%20device%20logs.htm

• Question 100:

  If the primary FortiAnalyzer in an HA cluster fails, how is the new primary elected?

  A. The configured IP address is checked first.

  B. The active port number is checked first.

  C. The firmware version is checked first.

  D. The configured priority is checked first

  Correct Answer: D

  In the case of a primary device failure, FortiAnalyzer HA uses the following rules to select a new primary: