Fortinet NSE5_FAZ-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-7.0 Online Questions & Answers

• Question 41:

  Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

  A. The total disk space is insufficient and you need to add other disk.
  B. CPU resources are too high.
  C. The ADOM disk quota is set too low based on log rates.
  D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.
  C. The ADOM disk quota is set too low based on log rates.

  ---

  https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG FAZ/1100_Storage/0017_Deleted%20device%20logs.htm https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration- guide/87802/automatic-deletion

• Question 42:

  What statements are true regarding disk log quota? (Choose two)

  A. The FortiAnalyzer stops logging once the disk log quota is met.
  B. The FortiAnalyzer automatically sets the disk log quota based on the device.
  C. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.
  D. The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.
  C. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.
  D. The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.

• Question 43:

  You need to upgrade your FortiAnalyzer firmware.

  What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

  A. FortiAnalyzer uses log fetching to retrieve the logs when back online
  B. FortiGate uses the miglogd process to cache the logs
  C. The logfiled process stores logs in offline mode
  D. Logs are dropped
  B. FortiGate uses the miglogd process to cache the logs

• Question 44:

  Which daemon is responsible for enforcing the log file size?

  A. sqlplugind
  B. logfiled
  C. miglogd
  D. ofrpd
  B. logfiled

  ---

  Disk quota enforcement is performed by different processes:

  The logfiled process enforces the log file size and is also responsible for disk quota enforcement by monitoring the other processes.

  FortiAnalyzer_7.0_Study_Guide-Online pag. 121

• Question 45:

  If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

  A. Hot swap the disk
  B. Replace the disk and rebuild the RAID manually
  C. Take no action if the RAID level supports a failed disk
  D. Shut down FortiAnalyzer and replace the disk
  D. Shut down FortiAnalyzer and replace the disk

  ---

  https://kb.fortinet.com/kb/documentLink.do?externalID=FD46446#:~:text=On%20FortiAnaly zer%2FFortiManager%20devices%20that,to%20exchanging%20the%20hard%20disk.

  If a hard disk on a FortiAnalyzer unit fails, it must be replaced. On FortiAnalyzer devices that support hardware RAID, the hard disk can be replaced while the unit is still running ?known as hot swapping. On FortiAnalyzer units with software RAID, the device must be shutdown prior to exchanging the hard disk.

  Reference: https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-swap- Hard-Disk-on-FortiAnalyzer/tap/194997?externalID=FD41397#:~:text=If%20a%20hard%20disk%20on,process%20know n%20as%20hot%20swapping

• Question 46:

  If the primary FortiAnalyzer in an HA cluster fails, how is the new primary elected?

  A. The configured IP address is checked first.
  B. The active port number is checked first.
  C. The firmware version is checked first.
  D. The configured priority is checked first
  D. The configured priority is checked first

  ---

  In the case of a primary device failure, FortiAnalyzer HA uses the following rules to select a new primary:

• Question 47:

  You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed. What is the recommended method to replace the disk?

  A. Shut down FortiAnalyzer and then replace the disk
  B. Downgrade your RAID level, replace the disk, and then upgrade your RAID level
  C. Clear all RAID alarms and replace the disk while FortiAnalyzer is still running
  D. Perform a hot swap
  A. Shut down FortiAnalyzer and then replace the disk

  ---

  

  https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-swap-Hard-Disk-on- FortiAnalyzer/ta-p/194997?externalID=FD41397#:~:text=If%20a%20hard%20disk%20on,process%20know n%20as%20hot%20swapping

• Question 48:

  In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

  A. Remote logging must be enabled on FortiGate
  B. Log encryption must be enabled
  C. ADOMs must be enabled
  D. FortiGate must be registered with FortiAnalyzer
  A. Remote logging must be enabled on FortiGate
  D. FortiGate must be registered with FortiAnalyzer

  ---

  Pg 70: "after you add and register a FortiGate device with the FortiAnalyzer unit, you must also ensure that the FortiGate device is configured to send logs to the FortiAnalyzer unit."

  https://docs.fortinet.com/uploaded/files/4614/FortiAnalyzer-5.4.6- Administration%20Guide.pdf

  Pg 45: "ADOMs must be enabled to support the logging and reporting of NON- FORTIGATE devices, such as FortiCarrier, FortiClientEMS, FortiMail, FortiWeb, FortiCache, and FortiSandbox."

• Question 49:

  Refer to the exhibit.

  

  Which image corresponds to the packet capture shown in the exhibit?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 50:

  You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used. What does the disk quota refer to?

  A. The maximum disk utilization for each device in the ADOM
  B. The maximum disk utilization for the FortiAnalyzer model
  C. The maximum disk utilization for the ADOM type
  D. The maximum disk utilization for all devices in the ADOM
  D. The maximum disk utilization for all devices in the ADOM

  ---

  page 66 FortiAnalyzer_6.4_Study_Guide