Fortinet NSE5_FAZ-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-7.2 Online Questions & Answers

• Question 71:

  What is the purpose of employing RAID with FortiAnalyzer?

  A. To introduce redundancy to your log data
  B. To provide data separation between ADOMs
  C. To separate analytical and archive data
  D. To back up your logs
  A. To introduce redundancy to your log data

• Question 72:

  Which statement about sending notifications with incident updates is true?

  A. Notifications can be sent only when an incident is created or deleted.
  B. You must configure an output profile to send notifications by email.
  C. Each incident can send notifications to a single external platform.
  D. Each connector used can have different notification settings.
  C. Each incident can send notifications to a single external platform.

• Question 73:

  Which statement is true when you are upgrading the firmware on an HA cluster made up of two FortiAnalyzer devices?

  A. First, upgrade the secondary device, and then upgrade the primary device.
  B. Both FortiAnalyzer devices will be upgraded at the same time.
  C. You can enable uninterruptible-upgrade so that the normal FortiAnalyzer operations are not interrupted while the cluster firmware upgrades.
  D. You can perform the firmware upgrade using only a console connection.
  A. First, upgrade the secondary device, and then upgrade the primary device.

• Question 74:

  Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

  A. FortiAnalyzer HA can function without VRRP. and VRRP is required only if you have more than two FortiAnalyzer devices in a cluster.
  B. FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.
  C. All devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.
  D. FortiAnalyzer HA implementation is supported by many public cloud infrastructures such as AWS, Microsoft Azure, and Google Cloud.
  B. FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.
  C. All devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.

• Question 75:

  An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1. What should the administrator do to solve this issue?

  A. Use the execute sql-local rebuild-db command to rebuild all ADOM databases.
  B. Use the execute sql-local rebuild-adom ADOM1 command to rebuild the ADOM database.
  C. Use the execute sql-report run ADOM1 command to run a report.
  D. Use the execute sql-local rebuild-adom root command to rebuild the ADOM database.
  B. Use the execute sql-local rebuild-adom ADOM1 command to rebuild the ADOM database.

• Question 76:

  What does the disk status Degraded mean for RAID management?

  A. One or more drives are missing from the FortiAnalyzer unit. The drive is no longer available to the operating system.
  B. The FortiAnalyzer device is writing to all the hard drives on the device in order to make the array fault tolerant.
  C. The FortiAnalyzer device is writing data to a newly added hard drive in order to restore the hard drive to an optimal state.
  D. The hard driveiIs no longer being used by the RAID controller
  D. The hard driveiIs no longer being used by the RAID controller

• Question 77:

  Refer to the exhibit.

  

  Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1: Which filter will achieve the desired result?

  A. operation-login and performed_on=="GUI(10.1.1.100)" and user!=admin
  B. operation-login and srcip==10.1.1.100 and dstip==10.1.1.210 and user==admin
  C. operation-login and dstip==10.1.1.210 and userl-admin
  D. operation-login and performed_on=="GUI(10.1.1.210)' and user!=admin
  A. operation-login and performed_on=="GUI(10.1.1.100)" and user!=admin

• Question 78:

  Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

  A. When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.
  B. Collector mode is the default operating mode.
  C. When in collector mode. FortiAnalyzer supports event management and reporting features.
  D. By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting
  A. When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.
  D. By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting

• Question 79:

  Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

  A. SSL is the default setting.
  B. SSL communications are auto-negotiated between the two devices.
  C. SSL can send logs in real-time only.
  D. SSL encryption levels are globally set on FortiAnalyzer.
  E. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.
  A. SSL is the default setting.
  D. SSL encryption levels are globally set on FortiAnalyzer.

• Question 80:

  View the exhibit:

  

  What does the 1000MB maximum for disk utilization refer to?

  A. The disk quota for the FortiAnalyzer model
  B. The disk quota for all devices in the ADOM
  C. The disk quota for each device in the ADOM
  D. The disk quota for the ADOM type
  B. The disk quota for all devices in the ADOM