Fortinet NSE5_FAZ-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-7.2 Online Questions & Answers

• Question 111:

  Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

  A. Antivirus logs
  B. Web filter logs
  C. IPS logs
  D. Application control logs
  B. Web filter logs

• Question 112:

  Which statement about the FortiSIEM management extension is correct?

  A. Allows you to manage the entire life cycle of a threat or breach.
  B. Its use of the available disk space is capped at 50%.
  C. It requires a licensed FortiSIEM supervisor.
  D. It can be installed as a dedicated VM.
  A. Allows you to manage the entire life cycle of a threat or breach.

• Question 113:

  Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

  A. License type
  B. Disk size
  C. Total quota
  D. RAID level
  B. Disk size
  D. RAID level

• Question 114:

  What is the purpose of a dataset query in FortiAnalyzer?

  A. It sorts log data into tables
  B. It extracts the database schema
  C. It retrieves log data from the database
  D. It injects log data into the database
  C. It retrieves log data from the database

• Question 115:

  You need to upgrade your FortiAnalyzer firmware.

  What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

  A. FortiAnalyzer uses log fetching to retrieve the logs when back online
  B. FortiGate uses themiglogdprocess to cache the logs
  C. Thelogfiledprocess stores logs in offline mode
  D. Logs are dropped
  B. FortiGate uses themiglogdprocess to cache the logs

• Question 116:

  Refer to the exhibit.

  

  The exhibit shows "remoteservergroup" is an authentication server group with LDAP and RADIUS servers.

  Which two statements express the significance of enabling "Match all users on remote server" when configuring a new administrator? (Choose two.)

  A. It creates a wildcard administrator using LDAP and RADIUS servers.
  B. Administrator can log in to FortiAnalyzer using their credentials on remote servers LDAP and RADIUS.
  C. Use remoteadmin from LDAP and RADIUS servers will be able to log in to FortiAnalyzer at anytime.
  D. It allows administrators to use two-factor authentication.
  A. It creates a wildcard administrator using LDAP and RADIUS servers.
  B. Administrator can log in to FortiAnalyzer using their credentials on remote servers LDAP and RADIUS.

• Question 117:

  Which two statements are true regarding ADOM modes? (Choose two.)

  A. You can only change ADOM modes through CLI.
  B. In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADOM.
  C. In an advanced mode ADOM. you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.
  D. Normal mode is the default ADOM mode.
  C. In an advanced mode ADOM. you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.
  D. Normal mode is the default ADOM mode.

• Question 118:

  Consider the CLI command:

  

  What is the purpose of the command?

  A. To add a unique tag to each log to prove that it came from this FortiAnalyzer
  B. To add the MD5 hash value and authentication code
  C. To add a log file checksum
  D. To encrypt log communications
  C. To add a log file checksum

• Question 119:

  Refer to the exhibit.

  

  Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

  A. Report size will be optimized to conserve disk space on FortiAnalyzer.
  B. Reports will be cached in the memory.
  C. This feature is automatically enabled for scheduled reports.
  D. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.
  C. This feature is automatically enabled for scheduled reports.
  D. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.

• Question 120:

  How are logs forwarded when FortiAnalyzer is using aggregation mode?

  A. Logs are forwarded as they are received and content files are uploaded at a scheduled time.
  B. Logs and content files are stored and uploaded at a scheduled time.
  C. Logs are forwarded as they are received.
  D. Logs and content files are forwarded as they are received.
  B. Logs and content files are stored and uploaded at a scheduled time.