NSE5_FAZ-6.2 questions and answers

Question 1

Single choice

What FortiGate process caches logs when FortiAnalyzer is not reachable?

1. A

   logfiled

2. B

   sqlplugind

3. C

   oftpd

4. D

   miglogd

Reveal answer details Close answer details

Correct answerD

Explanation

References:
https://forum.fortinet.com/tm.aspx?m=143106

Question 2

Single choice

Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

1. A

   Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated.

2. B

   Must establish an IPsec tunnel ID and pre-shared key.

3. C

   IPsec cannot be enabled if SSL is enabled as well.

4. D

   IPsec is only enabled through the CLI on FortiAnalyzer.

Reveal answer details Close answer details

Correct answerC

Question 3

Single choice

Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.

What is the most likely problem?

1. A

   CPU resources are too high

2. B

   Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

3. C

   The total disk space is insufficient and you need to add other disk

4. D

   The ADOM disk quota is set too low, based on log rates

Reveal answer details Close answer details

Correct answerD

Explanation

References:
https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/1100_Storage/0017_Deleted%20device%20logs.htm

Question 4

Single choice

If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

1. A

   Hot swap the disk

2. B

   Replace the disk and rebuild the RAID manually

3. C

   Take no action if the RAID level supports a failed disk

4. D

   Shut down FortiAnalyzer and replace the disk

Reveal answer details Close answer details

Correct answerB

Explanation

References:
https://www.fortinetguru.com/2020/06/raid-management-fortianalyzer-fortios-6-2-3-2/

Question 5

Single choice

If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

1. A

   Output profiles

2. B

   Report settings

3. C

   Report scheduling

4. D

   Custom datasets

Reveal answer details Close answer details

Correct answerD

Question 6

Single choice

How does FortiAnalyzer retrieve specific log data from the database?

1. A

   SQL FROM statement

2. B

   SQL GET statement

3. C

   SQL SELECT statement

4. D

   SQL EXTRACT statement

Reveal answer details Close answer details

Correct answerC

Question 7

Single choice

View the exhibit.

Why is the total quota less than the total system storage?

1. A

   3.6% of the system storage is already being used.

2. B

   Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files

3. C

   The oftpd process has not archived the logs yet

4. D

   The logfiled process is just estimating the total quota

Reveal answer details Close answer details

Correct answerB

Question 8

Multiple choice

When you perform a system backup, what does the backup configuration contain? (Choose two.)

1. A

   Generated reports

2. B

   Device list

3. C

   Authorized devices logs

4. D

   System information

Reveal answer details Close answer details

Correct answersB, D

Question 9

Multiple choice

For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

1. A

   Principal

2. B

   Service provider

3. C

   Identity collector

4. D

   Identity provider

Reveal answer details Close answer details

Correct answersB, D

Explanation

References:
https://docs.fortinet.com/document/fortianalyzer/6.2.0/new-features/957811/saml-adminauthentication#:~:text=for%20the%20administrator.-,FortiAnalyzer%20can%20play%20the%20role%20of%20the%20identity%20provider%20(IdP,external%20identity%20provider%20is%20available

Question 10

Multiple choice

Which statements are correct regarding FortiAnalyzer reports? (Choose two)

1. A

   FortiAnalyzer provides the ability to create custom reports.

2. B

   FortiAnalyzer glows you to schedule reports to run.

3. C

   FortiAnalyzer includes pre-defined reports only.

4. D

   FortiAnalyzer allows reporting for FortiGate devices only.

Reveal answer details Close answer details

Correct answersA, B