Fortinet NSE 5 - FortiAnalyzer 7.2 NSE5_FAZ-7.2 Dumps Questions

Fortinet NSE 5 – FortiAnalyzer 7.2 NSE5_FAZ-7.2 Dumps Questions

Jonnie Karnath2023-10-13T06:20:04+00:00

In order to increase your chances of successfully passing your NSE5_FAZ-7.2 Fortinet NSE 5 – FortiAnalyzer 7.2 exam, we highly recommend studying the latest Fortinet NSE 5 – FortiAnalyzer 7.2 NSE5_FAZ-7.2 Dumps Questions from Certspots. By utilizing these comprehensive study materials, you will be able to thoroughly prepare yourself for the exam and significantly improve your performance. With the assistance of Certspots’ NSE5_FAZ-7.2 Dumps Questions, you can gain a deeper understanding of the exam topics, familiarize yourself with the format and structure of the test, and enhance your overall knowledge and skills. By investing time and effort into studying these valuable resources, you can confidently approach your exam and ensure that you navigate through it with ease, ultimately leading to your success. Trust Certspots to provide you with the necessary tools and resources to achieve your desired results in the NSE5_FAZ-7.2 Fortinet NSE 5 – FortiAnalyzer 7.2 exam.

Page 1 of 5

1. After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

execute sql-local rebuild-adom <new-ADOM-name>

To reset the disk quota enforcement to default

To remove the analytics logs of the device from the old database

To migrate the archive logs to the new ADOM

To populate the new ADOM with analytical logs for the moved device, so you can run reports

2. What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?

A FortiGate ADOM

The FortiGate serial number

A pre-shared key

Valid FortiAnalyzer credentials

3. What are offline logs on FortiAnalyzer?

Compressed logs, which are also known as archive logs, are considered to be offline logs.

When you restart FortiAnalyzer. all stored logs are considered to be offline logs.

Logs that are indexed and stored in the SQL database.

Logs that are collected from offline devices after they boot up.

4. A play book contains five tasks in total. An administrator executed the playbook and four out of five tasks finished successfully, but one task failed.

What will be the status of the playbook after its execution?

Success

Failed

Running

Upstream_failed

5. What is the purpose of trigger variables?

To display statistics about the playbook runtime

To use information from the trigger to filter the action in a task

To provide the trigger information to make the playbook start running

To store the start times of playbooks with On_Schedule triggers

6. Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

Report size will be optimized to conserve disk space on FortiAnalyzer.

Reports will be cached in the memory.

This feature is automatically enabled for scheduled reports.

Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.

7. Which two actions should an administrator take to view Compromised Hosts on FortiAnalyzer? (Choose two.)

Enable web filtering in firewall policies on FortiGate devices, and make sure these logs are sent to FortiAnalyzer.

Make sure all endpoints are reachable by FortiAnalyzer.

Enable device detection on an interface on the FortiGate devices that are connected to the FortiAnalyzer device.

Subscribe FortiAnalyzer to FortiGuard to keep its local threat database up to date.

8. What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

Hot swap the disk.

There is no need to do anything because the disk will self-recover.

Run execute format disk to format and restart the FortiAnalyzer device.

Shut down FortiAnalyzer and replace the disk

9. How are logs forwarded when FortiAnalyzer is using aggregation mode?

Logs are forwarded as they are received and content files are uploaded at a scheduled time.

Logs and content files are stored and uploaded at a scheduled time.

Logs are forwarded as they are received.

Logs and content files are forwarded as they are received.

10. What FortiGate process caches logs when FortiAnalyzer is not reachable?

logfiled

sqlplugind

oftpd

miglogd

Page 2 of 5

11. What is the purpose of a predefined template on the FortiAnalyzer?

It can be edited and modified as required

It specifies the report layout which contains predefined texts, charts, and macros

It specifies report settings which contains time period, device selection, and schedule

It contains predefined data to generate mock reports

12. What can you do on FortiAnalyzer to restrict administrative access from specific locations?

Configure trusted hosts for that administrator.

Enable geo-location services on accessible interface.

Configure two-factor authentication with a remote RADIUS server.

Configure an ADOM for respective location.

13. Which two statements are true regarding the outbreak detection service? (Choose two.)

New alerts are received by email.

Outbreak alerts are available on the root ADOM only.

An additional license is required.

It automatically downloads new event handlers and reports.

14. An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1.

What should the administrator do to solve this issue?

Use the execute sql-local rebuild-db command to rebuild all ADOM databases.

Use the execute sql-local rebuild-adom ADOM1 command to rebuild the ADOM database.

Use the execute sql-report run ADOM1 command to run a report.

Use the execute sql-local rebuild-adom root command to rebuild the ADOM database.

15. 1.Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

Virtual domains

Administrative access profiles

Trusted hosts

Security Fabric

16. Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

In Log View, this feature allows you to build a dataset and chart automatically, based on the filtered search results.

In Log View, this feature allows you to build a chart and chart automatically, on the top 100 log entries.

This feature allows you to build a chart under FortiView.

You can add charts to generated reports using this feature.

17. On FortiAnalyzer, what is a wildcard administrator account?

An account that permits access to members of an LDAP group

An account that allows guest access with read-only privileges

An account that requires two-factor authentication

An account that validates against any user account on a FortiAuthenticator

18. If the primary FortiAnalyzer in an HA cluster fails, how is the new primary elected?

The configured IP address is checked first.

The active port number is checked first.

The firmware version is checked first.

The configured priority is checked first

19. In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve

Configure # set resolve-ip enable in the system FortiView settings

Configure local DNS servers on FortiAnalyzer

Resolve IP addresses on FortiGate

20. View the exhibit:

What does the 1000MB maximum for disk utilization refer to?

The disk quota for the FortiAnalyzer model

The disk quota for all devices in the ADOM

The disk quota for each device in the ADOM

The disk quota for the ADOM type

Page 3 of 5

21. Which two statements are true regarding ADOM modes? (Choose two.)

You can only change ADOM modes through CL

In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADO

In an advanced mode ADO

you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.

Normal mode is the default ADOM mode.

22. What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log

settings?

The log file is stored as a raw log and is available for analytic support.

The log file rolls over and is archived.

The log file is purged from the database.

The log file is overwritten.

23. What must you consider when using log fetching? (Choose two.)

The fetch client can retrieve logs from devices that are not added to its local Device Manager

You can use filters to include only logs from a single device.

The fetching profile must include a user with the Super_User profile.

The archive logs retrieved from the server become archive logs in the client.

24. What does the disk status Degraded mean for RAID management?

One or more drives are missing from the FortiAnalyzer unit. The drive is no longer available to the operating system.

The FortiAnalyzer device is writing to all the hard drives on the device in order to make the array fault tolerant.

The FortiAnalyzer device is writing data to a newly added hard drive in order to restore the hard drive to an optimal state.

The hard driveiIs no longer being used by the RAID controller

25. Which two purposes does the auto cache setting on reports serve? (Choose two.)

It automatically updates the hcache when new logs arrive.

It provides diagnostics on report generation time.

It reduces the log insert lag rate.

It reduces report generation time.

26. FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

To upload logs to an SFTP server

To prevent log modification during backup

To send an identical set of logs to a second logging server

To encrypt log communication between devices

27. An administrator has moved FortiGate A from the root ADOM to ADOM1.

Which two statements are true regarding logs? (Choose two.)

Analytics logs will be moved to ADOM1 from the root ADOM automatically.

Archived logs will be moved to ADOM1 from the root ADOM automatically.

Logs will be presented in both ADOMs immediately after the move.

Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the ADOM1 SQL database.

28. On the RAID management page, the disk status is listed as Initializing.

What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

FortiAnalyzer is ensuring that the parity data of a redundant drive is valid

FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state

FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant

FortiAnalyzer is functioning normally

29. In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

Configure local DNS servers on FortiAnalyzer

Resolve IPs on FortiGate

Configure # set resolve-ip enable in the system FortiView settings

Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

30. Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

FortiView

Event Management

Device Manger

Reporting

Page 4 of 5

31. Which statement correctly describes the management extensions available on FortiAnalyzer?

Management extensions do not require additional licenses.

Management extensions allow FortiAnalyzer to act as a ForbSIEM supervisor.

Management extensions require a dedicated VM for best performance.

Management extensions may require a minimum number of CPU cores to run.

32. Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)

Mail server

Output profile

SFTP server

Report scheduling

33. Why run the command diagnose sql status sqlplugind?

To list the current SQL processes running

To check what is the database log insertion status

To display the SOL query connections and hcache status

To view the current hcache size

34. You’ve moved a registered logging device out of one ADOM and into a new ADOM.

What happens when you rebuild the new ADOM database?

FortiAnalyzer resets the disk quota of the new ADOM to default.

FortiAnalyzer migrates archive logs to the new ADO

FortiAnalyzer migrates analytics logs to the new ADO

FortiAnalyzer removes logs from the old ADO

35. If you upgrade the FortiAnalyzer firmware, which report element can be affected?

Custom datasets

Report scheduling

Report settings

Output profiles

36. Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

SSL is the default setting.

SSL communications are auto-negotiated between the two devices.

SSL can send logs in real-time only.

SSL encryption levels are globally set on FortiAnalyzer.

FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.

37. What is the recommended method of expanding disk space on a FortiAnalyzer VM?

From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage

From the VM host manager, expand the size of the existing virtual disk

From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk

From the VM host manager, add an additional virtual disk and rebuild your RAID array

38. Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

FortiAnalyzer HA can function without VRR

and VRRP is required only if you have more than two FortiAnalyzer devices in a cluster.

FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.

All devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.

FortiAnalyzer HA implementation is supported by many public cloud infrastructures such as AWS, Microsoft Azure, and Google Cloud.

39. What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

All FortiGates can send logs to FortiAnalyzer using the store and upload option.

Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.

Both secure communications methods (SSL and IPsec) allow the store and upload option.

Disk logging is enabled on the FortiGate through the CLI only.

Disk logging is enabled by default on the FortiGate.

40. A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.

What can you do on FortiAnalyzer to accomplish this?

Click FortiView and generate a report for that administrator.

Click Task Monitor and view the tasks performed by that administrator.

Click Log View and generate a report for that administrator.

View the tasks performed by the rogue administrator in Fabric View.

Page 5 of 5

41. What are analytics logs on FortiAnalyzer?

Log type Traffic logs.

Logs that roll over when the log file reaches a specific size.

Logs that are indexed and stored in the SQ

Raw logs that are compressed and saved to a log file.

42. FortiAnalyzer centralizes which functions? (Choose three)

Network analysis

Graphical reporting

Content archiving / data mining

Vulnerability assessment

Security log analysis / forensics

43. When you perform a system backup, what does the backup configuration contain? (Choose two.)

Generated reports

Device list

Authorized devices logs

System information

44. Which two statements are true regarding fabric connectors? (Choose two.)

Configuring fabric connectors to send notification to ITSM platform upon incident creation Is more efficient than third-party information from the FortiAnalyzer AP

Fabric connectors allow to save storage costs and improve redundancy.

Storage connector service does not require a separate license to send logs to cloud platform.

Cloud-Out connections allow you to send real-time logs to pubic cloud accounts like Amazon S3, Azure Blob, and Google Cloud.

By Jonnie Karnath SAP Free Dumps Fortinet NSE 5 - FortiAnalyzer 7.2, NSE5_FAZ-7.2, NSE5_FAZ-7.2 Dumps Questions 0 Comments

Facebook Twitter LinkedIn Google + Email

Fortinet NSE 5 – FortiAnalyzer 7.2 NSE5_FAZ-7.2 Dumps Questions

Fortinet NSE 5 – FortiAnalyzer 7.2 NSE5_FAZ-7.2 Dumps Questions

Author

LEAVE A COMMENT Cancel reply

Related Posts