Fortinet NSE5_FAZ-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-7.0 Online Questions & Answers

• Question 61:

  Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

  A. Log upload
  B. Indicators of Compromise
  C. Log forwarding an aggregation mode
  D. Log fetching
  D. Log fetching

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration- guide/651442/fetcher-management

• Question 62:

  On FortiAnalyzer, what is a wildcard administrator account?

  A. An account that permits access to members of an LDAP group
  B. An account that allows guest access with read-only privileges
  C. An account that requires two-factor authentication
  D. An account that validates against any user account on a FortiAuthenticator
  A. An account that permits access to members of an LDAP group

  ---

  https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/747268/configuring-wildcard- admin-accounts

• Question 63:

  What is the purpose of a dataset query in FortiAnalyzer?

  A. It sorts log data into tables
  B. It extracts the database schema
  C. It retrieves log data from the database
  D. It injects log data into the database
  C. It retrieves log data from the database

  ---

  Reference: https://docs2.fortinet.com/document/fortianalyzer/6.0.4/administration- guide/148744/creating-datasets

• Question 64:

  Which statements are correct regarding FortiAnalyzer reports? (Choose two)

  A. FortiAnalyzer provides the ability to create custom reports.
  B. FortiAnalyzer glows you to schedule reports to run.
  C. FortiAnalyzer includes pre-defined reports only.
  D. FortiAnalyzer allows reporting for FortiGate devices only.
  A. FortiAnalyzer provides the ability to create custom reports.
  B. FortiAnalyzer glows you to schedule reports to run.

• Question 65:

  View the exhibit:

  

  What does the 1000MB maximum for disk utilization refer to?

  A. The disk quota for the FortiAnalyzer model
  B. The disk quota for all devices in the ADOM
  C. The disk quota for each device in the ADOM
  D. The disk quota for the ADOM type
  B. The disk quota for all devices in the ADOM

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration- guide/743670/configuring-log-storage-policy

• Question 66:

  Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?

  A. Incidents dashboards
  B. Threat hunting
  C. FortiView Monitor
  D. Outbreak alert services
  B. Threat hunting

  ---

  FortiAnalyzer_7.0_Study_Guide-Online pag. 217

• Question 67:

  FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days. What is the most likely problem?

  A. Quota enforcement is acting on analytical data before a report is complete
  B. Logs are rolling before the report is run
  C. CPU resources are too high
  D. Disk utilization for archive logs is set for 15 days
  A. Quota enforcement is acting on analytical data before a report is complete

  ---

  Reference: https://forum.fortinet.com/tm.aspx?m=138806

• Question 68:

  What is Log Insert Lag Time on FortiAnalyzer?

  A. The number of times in the logs where end users experienced slowness while accessing resources.
  B. The amount of lag time that occurs when the administrator is rebuilding the ADOM database.
  C. The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.
  D. The amount of time FortiAnalyzer takes to receive logs from a registered device
  C. The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.

• Question 69:

  Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

  A. Both modes, forwarding and aggregation, support encryption of logs between devices.
  B. In aggregation mode, you can forward logs to syslog and CEF servers as well.
  C. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.
  D. Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.
  A. Both modes, forwarding and aggregation, support encryption of logs between devices.
  C. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.

  ---

  Aggregation mode is only supported between two FortiAnalyer devices, so B is wrong.

  Forwarding is always in real time and does not ONLY forward to other FortiAnalyzer devices. It also forwards to Syslog/CEF. D is wrong. Answer is A and C.

• Question 70:

  What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

  A. SFTP, FTP, or SCP server
  B. Mail server
  C. Output profile
  D. Report scheduling
  B. Mail server
  C. Output profile

  ---

  From study guide

  In order to use any of these external storage mothods, you must set up the back end. This includes configuring a mail service and an output profile.