Fortinet NSE5_FAZ-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-7.0 Online Questions & Answers

• Question 111:

  Which statement is true when you are upgrading the firmware on an HA cluster made up of two FortiAnalyzer devices?

  A. First, upgrade the secondary device, and then upgrade the primary device.
  B. Both FortiAnalyzer devices will be upgraded at the same time.
  C. You can enable uninterruptible-upgrade so that the normal FortiAnalyzer operations are not interrupted while the cluster firmware upgrades.
  D. You can perform the firmware upgrade using only a console connection.
  A. First, upgrade the secondary device, and then upgrade the primary device.

  ---

  https://docs.fortinet.com/document/fortianalyzer/7.2.0/upgrade-guide/262607/upgrading-fortianalyzer-firmware

  >To upgrade firmware for a cluster, Fortinet recommends upgrading the HA secondary units first, followed by the HA primary unit last.

• Question 112:

  What is the purpose of a predefined template on the FortiAnalyzer?

  A. It can be edited and modified as required
  B. It specifies the report layout which contains predefined texts, charts, and macros
  C. It specifies report settings which contains time period, device selection, and schedule
  D. It contains predefined data to generate mock reports
  B. It specifies the report layout which contains predefined texts, charts, and macros

  ---

  Reference: https://docs2.fortinet.com/document/fortianalyzer/6.0.8/administration- guide/618245/predefined-reports-templates-charts-and-macros

• Question 113:

  Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

  A. FROM
  B. LIMIT
  C. WHERE
  D. ORDER BY
  A. FROM

  ---

  Select FROM... in any kind of database you must specify where you will get the data you are consulting, that's the FROM functionality... WHERE is just an aditional condition Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD48500

• Question 114:

  Refer to the exhibit.

  

  Which statement is correct regarding the event displayed?

  A. The security risk was blocked or dropped.
  B. The security event risk is considered open.
  C. An incident was created from this event.
  D. The risk source is isolated.
  A. The security risk was blocked or dropped.

  ---

  Events in FortiAnalyzer will be in one of four statuses. The current status will determine if more actions need to be taken by the security team or not.

  The possible statuses are:

  Unhandled: The security event risk is not mitigated or contained, so it is considered open.

  Contained: The risk source is isolated.

  Mitigated: The security risk is mitigated by being blocked or dropped.

  (Blank): Other scenarios.

  FortiAnalyzer_7.0_Study_Guide-Online pag. 206