Fortinet NSE5_FAZ-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-7.0 Online Questions & Answers

• Question 81:

  Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

  A. Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto- negotiated.
  B. Must establish an IPsec tunnel ID and pre-shared key.
  C. IPsec cannot be enabled if SSL is enabled as well.
  D. IPsec is only enabled through the CLI on FortiAnalyzer.
  A. Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto- negotiated.
  B. Must establish an IPsec tunnel ID and pre-shared key.

• Question 82:

  Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

  A. A local wildcard administrator account
  B. A remote LDAP server
  C. A trusted host profile that restricts access to the LDAP group
  D. An administrator group
  A. A local wildcard administrator account
  B. A remote LDAP server

  ---

  Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD38567

• Question 83:

  Which two elements are contained in a system backup created on FortiAnalyzer? (Choose two.)

  A. System information
  B. Logs from registered devices
  C. Report information
  D. Database snapshot
  A. System information
  C. Report information

  ---

  What does the System Configuration backup include?

  System information, such as the device IP address and administrative user information.

  Device list, such as any devices you configured to allow log access.

  Report information, such as any configured report settings, as well as all your custom report details. These are not the actual reports.

  FortiAnalyzer_7.0_Study_Guide-Online pag. 29

• Question 84:

  What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

  A. Chart Builder
  B. Export to Report Chart
  C. Dataset Library
  D. Custom View
  A. Chart Builder

  ---

  Keyword is Fortiview feature. Chart Builder is in Log view and the export to report chart is in the fortiview. they are both similar just generated in different areas.

• Question 85:

  When working with FortiAnalyzer reports, what is the purpose of a dataset?

  A. To provide the layout used for reports
  B. To define the chart type to be used
  C. To retrieve data from the database
  D. To set the data included in templates
  C. To retrieve data from the database

  ---

  FortiAnalyzer_7.0_Study_Guide-Online pag. 257 Reference: https://docs2.fortinet.com/document/fortianalyzer/6.0.4/administration- guide/148744/creating-datasets

• Question 86:

  Which SQL query is in the correct order to query the database in the FortiAnslyzer?

  A. SELECT devid WHERE 'user'='USER1' FROM $log GROUP BY devid
  B. FROM $log WHERE 'user'='USER1' SELECT devid GROUP BY devid
  C. SELECT devid FROM $log WHERE 'user'='USER1' GROUP BY devid
  D. SELECT devid FROM $log GROUP BY devid WHERE 'user'='USER1'
  C. SELECT devid FROM $log WHERE 'user'='USER1' GROUP BY devid

• Question 87:

  Which two statement are true regardless initial Logs sync and Log Data Sync for Ha on FortiAnalyzer?

  A. By default, Log Data Sync is disabled on all backup devise.
  B. Log Data Sync provides real-time log synchronization to all backup devices.
  C. With initial Logs Sync, when you add a unit to an HA cluster, the primary device synchronizes its logs with the backup device.
  D. When Logs Data Sync is turned on, the backup device will reboot and then rebuilt the log database with the synchronized logs.
  C. With initial Logs Sync, when you add a unit to an HA cluster, the primary device synchronizes its logs with the backup device.
  D. When Logs Data Sync is turned on, the backup device will reboot and then rebuilt the log database with the synchronized logs.

• Question 88:

  Refer to the exhibit.

  

  What does the data point at 14:55 tell you?

  A. The received rate is almost at its maximum for this device
  B. The sqlplugind daemon is behind in log indexing by two logs
  C. Logs are being dropped
  D. Raw logs are reaching FortiAnalyzer faster than they can be indexed
  D. Raw logs are reaching FortiAnalyzer faster than they can be indexed

• Question 89:

  Which two statements express the advantages of grouping similar reports? (Choose two.)

  A. Improve report completion time.
  B. Conserve disk space on FortiAnalyzer by grouping multiple similar reports.
  C. Reduce the number of hcache tables and improve auto-hcache completion time.
  D. Provides a better summary of reports.
  A. Improve report completion time.
  C. Reduce the number of hcache tables and improve auto-hcache completion time.

• Question 90:

  Which two statements about log forwarding are true? (Choose two.)

  A. Forwarded logs cannot be filtered to match specific criteria.
  B. Logs are forwarded in real-time only.
  C. The client retains a local copy of the logs after forwarding.
  D. You can use aggregation mode only with another FortiAnalyzer.
  C. The client retains a local copy of the logs after forwarding.
  D. You can use aggregation mode only with another FortiAnalyzer.

  ---

  https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/420493/modes https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/621804/log- forwarding