Home / Fortinet / NSE5_FAZ-7.2

Fortinet NSE5_FAZ-7.2 Practice Test - Questions Answers, Page 4

Question list

List of questions

Question 31

(0)

Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

Question 32

(0)

You need to upgrade your FortiAnalyzer firmware. What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

Question 33

(0)

After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command? execute sql-local rebuild-adom <new-ADOM-name>

Question 34

(0)

If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Question 35

(0)

If you upgrade the FortiAnalyzer firmware, which report element can be affected?

Question 36

(0)

FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days. What is the most likely problem?

Question 37

(0)

Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Question 38

(0)

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

Question 39

(0)

When you perform a system backup, what does the backup configuration contain? (Choose two.)

Question 40

(0)

Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

Question 31

Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

To properly correlate logs

To use real-time forwarding

To resolve host names

To improve DNS response times

Show Answer Comment (0)

Question 32

You need to upgrade your FortiAnalyzer firmware.

What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

FortiAnalyzer uses log fetching to retrieve the logs when back online

FortiGate uses the miglogd process to cache the logs

The logfiled process stores logs in offline mode

Logs are dropped

Show Answer Comment (0)

Question 33

After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

execute sql-local rebuild-adom <new-ADOM-name>

To reset the disk quota enforcement to default

To remove the analytics logs of the device from the old database

To migrate the archive logs to the new ADOM

To populate the new ADOM with analytical logs for the moved device, so you can run reports

Show Answer Comment (0)

Question 34

If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Hot swap the disk

Replace the disk and rebuild the RAID manually

Take no action if the RAID level supports a failed disk

Shut down FortiAnalyzer and replace the disk

Show Answer Comment (0)

Question 35

If you upgrade the FortiAnalyzer firmware, which report element can be affected?

Custom datasets

Report scheduling

Report settings

Output profiles

Show Answer Comment (0)

Question 36

FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.

What is the most likely problem?

Quota enforcement is acting on analytical data before a report is complete

Logs are rolling before the report is run

CPU resources are too high

Disk utilization for archive logs is set for 15 days

Show Answer Comment (0)

Question 37

Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Antivirus logs

Web filter logs

IPS logs

Application control logs

Show Answer Comment (0)

Question 38

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

A local wildcard administrator account

A remote LDAP server

A trusted host profile that restricts access to the LDAP group

An administrator group

Show Answer Comment (0)