Fortinet Fortinet Certifications NSE5_FAZ-7.0 Questions & Answers

• Question 31:

  Which SQL query is in the correct order to query the database in the FortiAnslyzer?

  A. SELECT devid WHERE 'user'='USER1' FROM $log GROUP BY devid

  B. FROM $log WHERE 'user'='USER1' SELECT devid GROUP BY devid

  C. SELECT devid FROM $log WHERE 'user'='USER1' GROUP BY devid

  D. SELECT devid FROM $log GROUP BY devid WHERE 'user'='USER1'

  Correct Answer: C

• Question 32:

  FortiAnalyzer centralizes which functions? (Choose three)

  A. Network analysis

  B. Graphical reporting

  C. Content archiving / data mining

  D. Vulnerability assessment

  E. Security log analysis / forensics

  Correct Answer: BCE

• Question 33:

  How do you restrict an administrator's access to a subset of your organization's ADOMs?

  A. Set the ADOM mode to Advanced

  B. Assign the ADOMs to the administrator's account

  C. Configure trusted hosts

  D. Assign the default Super_User administrator profile

  Correct Answer: B

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration- guide/717578/assigning-administrators-to-an-adom

• Question 34:

  Which two purposes does the auto cache setting on reports serve? (Choose two.)

  A. It automatically updates the hcache when new logs arrive.

  B. It provides diagnostics on report generation time.

  C. It reduces the log insert lag rate.

  D. It reduces report generation time.

  Correct Answer: AD

  Reference: https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/384416/how- auto-cache-works https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/86926/enabling- auto-cache

• Question 35:

  What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

  A. RADIUS

  B. Local

  C. LDAP

  D. PKI

  E. TACACS+

  Correct Answer: ACE

• Question 36:

  Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

  A. Log upload

  B. Indicators of Compromise

  C. Log forwarding an aggregation mode

  D. Log fetching

  Correct Answer: D

  https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration- guide/651442/fetcher-management

• Question 37:

  What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

  A. All FortiGates can send logs to FortiAnalyzer using the store and upload option.

  B. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.

  C. Both secure communications methods (SSL and IPsec) allow the store and upload option.

  D. Disk logging is enabled on the FortiGate through the CLI only.

  E. Disk logging is enabled by default on the FortiGate.

  Correct Answer: BCD

• Question 38:

  For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

  A. Principal

  B. Service provider

  C. Identity collector

  D. Identity provider

  Correct Answer: BD

  In FortiAnalyzer, SAML can be enabled across all Security Fabric devices, enabling smooth movement between devices for the administrator by means of single sign-on (SSO). FortiAnalyzer can play the role of the identity provider (IdP), the service provider (SP), or Fabric SP, when an external identity provider is available. FortiAnalyzer_7.0_Study_Guide-Online pag. 48

• Question 39:

  What are the operating modes of FortiAnalyzer? (Choose two)

  A. Standalone

  B. Manager

  C. Analyzer

  D. Collector

  Correct Answer: CD

• Question 40:

  What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

  A. The log file is stored as a raw log and is available for analytic support.

  B. The log file rolls over and is archived.

  C. The log file is purged from the database.

  D. The log file is overwritten.

  Correct Answer: B

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/6d9f8fb5-6cf4-11e9-81a4-00505692583a/FortiAnalyzer-6.0.5-Administration-Guide.pdf

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/355632/log- browse