Fortinet NSE5_FAZ-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-7.0 Online Questions & Answers

• Question 21:

  In Log View, you can use the Chart Builder feature to build a dataset and chart based on the filtered search results. Similarly, which feature you can use for FortiView?

  A. Export to Report Chart
  B. Export to PDF
  C. Export to Chart Builder
  D. Export to Custom Chart
  A. Export to Report Chart

  ---

  Similar to the Chart Builder feature in Log View, you can export a chart from a FortiView. The chart export includes any filters you set on the FortiView. FortiAnalyzer_7.0_Study_Guide-Online pag. 292.

• Question 22:

  What are analytics logs on FortiAnalyzer?

  A. Log type Traffic logs.
  B. Logs that roll over when the log file reaches a specific size.
  C. Logs that are indexed and stored in the SQL.
  D. Raw logs that are compressed and saved to a log file.
  C. Logs that are indexed and stored in the SQL.

• Question 23:

  What does the disk status Degraded mean for RAID management?

  A. One or more drives are missing from the FortiAnalyzer unit. The drive is no longer available to the operating system.
  B. The FortiAnalyzer device is writing to all the hard drives on the device in order to make the array fault tolerant.
  C. The FortiAnalyzer device is writing data to a newly added hard drive in order to restore the hard drive to an optimal state.
  D. The hard driveiIs no longer being used by the RAID controller
  D. The hard driveiIs no longer being used by the RAID controller

• Question 24:

  If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

  A. Output profiles
  B. Report settings
  C. Report scheduling
  D. Custom datasets
  D. Custom datasets

• Question 25:

  What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

  A. RADIUS
  B. Local
  C. LDAP
  D. PKI
  E. TACACS+
  A. RADIUS
  C. LDAP
  E. TACACS+

• Question 26:

  In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

  How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

  A. Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve
  B. Configure # set resolve-ip enable in the system FortiView settings
  C. Configure local DNS servers on FortiAnalyzer
  D. Resolve IP addresses on FortiGate
  D. Resolve IP addresses on FortiGate

  ---

  https://packetplant.com/fortigate-and-fortianalyzer-resolve-source-and-destination-ip/ "

  As a best practice, it is recommended to resolve IPs on the FortiGate end. This is because you get both source and destination, and it offloads the work from FortiAnalyzer. On FortiAnalyzer, this IP resolution does destination IPs only"

• Question 27:

  FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

  A. To upload logs to an SFTP server
  B. To prevent log modification during backup
  C. To send an identical set of logs to a second logging server
  D. To encrypt log communication between devices
  D. To encrypt log communication between devices

• Question 28:

  Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

  A. Antivirus logs
  B. Web filter logs
  C. IPS logs
  D. Application control logs
  B. Web filter logs

  ---

  Reference: https://help.fortinet.com/fa/faz50hlp/60/6-0-2/Content/FortiAnalyzer_Admin_Guide/3600_FortiView/0200_Using_FortiView/1200_Compromised_ hosts_page.htm?TocPath=FortiView%7CUsing%20FortiView%7C_____6

• Question 29:

  A play book contains five tasks in total. An administrator executed the playbook and four out of five tasks finished successfully, but one task failed. What will be the status of the playbook after its execution?

  A. Success
  B. Failed
  C. Running
  D. Upstream_failed
  B. Failed

  ---

  Playbook jobs that include one or more failed tasks are labeled as Failed in Playbook Monitor. FortiAnalyzer_7.0_Study Guide page No: 247

• Question 30:

  What are two advantages of setting up fabric ADOM? (Choose two.)

  A. It can be used for fast data processing and log correlation
  B. It can be used to facilitate communication between devices in same Security Fabric
  C. It can include all Fortinet devices that are part of the same Security Fabric
  D. It can include only FortiGate devices that are part of the same Security Fabric
  A. It can be used for fast data processing and log correlation
  C. It can include all Fortinet devices that are part of the same Security Fabric

  ---

  All Fortinet devices in a Security Fabric can be placed into the same ADOM It allows for fast data processing and data correlation, also enables combined results to be presented in reports, FortiView, and more https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration- guide/448471/creating-a-security-fabric-adom