Exit demo NSE5_FAZ-7.0 Fortinet NSE 5 - FortiAnalyzer 7.0 PDF format · free preview

Fortinet NSE5_FAZ-7.0 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/nse5-faz-70.html

Question 1
Single choice

Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

A.

Antivirus logs

B.

Web filter logs

C.

IPS logs

D.

Application control logs

Question 2
Single choice

The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device.

What can be the reason for this failure?

A.

FortiAnalyzer is in an HA cluster.

B.

ADOM mode should be set to advanced, in order to register the FortiClient EMS device.

C.

ADOMs are not enabled on FortiAnalyzer.

D.

A separate license is required on FortiAnalyzer in order to register the FortiClient EMS device.

Question 3
Multiple choice

Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

A.

By deploying different FortiAnalyzer devices in both modes, you can improve their overall performance.

B.

When in collector mode. FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.

C.

When in collector mode. FortiAnalyzer supports event management and reporting features.

D.

By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting

E.

Collector mode is the default operating mode.

Question 4
Multiple choice

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

A.

A local wildcard administrator account

B.

A remote LDAP server

C.

A trusted host profile that restricts access to the LDAP group

D.

An administrator group

Question 5
Single choice

If you upgrade the FortiAnalyzer firmware, which report element can be affected?

A.

Custom datasets

B.

Report scheduling

C.

Report settings

D.

Output profiles

Question 6
Single choice

If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

A.

Output profiles

B.

Report settings

C.

Report scheduling

D.

Custom datasets

Question 7
Multiple choice

What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

A.

SFTP, FTP, or SCP server

B.

Mail server

C.

Output profile

D.

Report scheduling

Question 8
Multiple choice

Which two statements express the advantages of grouping similar reports? (Choose two.)

A.

Improve report completion time.

B.

Conserve disk space on FortiAnalyzer by grouping multiple similar reports.

C.

Reduce the number of hcache tables and improve auto-hcache completion time.

D.

Provides a better summary of reports.

Question 9
Multiple choice

What purposes does the auto-cache setting on reports serve? (Choose two.)

A.

To reduce report generation time

B.

To automatically update the hcache when new logs arrive

C.

To reduce the log insert lag rate

D.

To provide diagnostics on report generation time

Question 10
Single choice

What are analytics logs on FortiAnalyzer?

A.

Log type Traffic logs.

B.

Logs that roll over when the log file reaches a specific size.

C.

Logs that are indexed and stored in the SQL.

D.

Raw logs that are compressed and saved to a log file.

Showing 10 of 114 questions · Unlock the full set