Home / Fortinet / NSE5_FAZ-7.2

Fortinet NSE5_FAZ-7.2 Practice Test - Questions Answers, Page 7

Question list

List of questions

Question 61

(0)

For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

Question 62

(0)

Which two purposes does the auto cache setting on reports serve? (Choose two.)

Question 63

(0)

What are offline logs on FortiAnalyzer?

Question 64

(0)

Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

Question 65

(0)

An administrator has configured the following settings: config system fortiview settings set resolve-ip enable end What is the significance of executing this command?

Question 66

(0)

Which two statements are true regarding ADOM modes? (Choose two.)

Question 67

(0)

Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

Question 68

(0)

An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1. What should the administrator do to solve th

Question 69

(0)

Which statement is true regarding Macros on FortiAnalyzer?

Question 70

(0)

Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

Question 61

For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

Principal

Service provider

Identity collector

Identity provider

Show Answer Comment (0)

Question 62

Which two purposes does the auto cache setting on reports serve? (Choose two.)

It automatically updates the hcache when new logs arrive.

It provides diagnostics on report generation time.

It reduces the log insert lag rate.

It reduces report generation time.

Show Answer Comment (0)

Question 63

What are offline logs on FortiAnalyzer?

Compressed logs, which are also known as archive logs, are considered to be offline logs.

When you restart FortiAnalyzer. all stored logs are considered to be offline logs.

Logs that are indexed and stored in the SQL database.

Logs that are collected from offline devices after they boot up.

Show Answer Comment (0)

Question 64

Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end.

Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version.

Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.

Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device.

Show Answer Comment (0)

Question 65

An administrator has configured the following settings:

config system fortiview settings

set resolve-ip enable

end

What is the significance of executing this command?

Use this command only if the source IP addresses are not resolved on FortiGate.

It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.

You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.

It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

Show Answer Comment (0)

Question 66

Which two statements are true regarding ADOM modes? (Choose two.)

You can only change ADOM modes through CLI.

In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADOM.

In an advanced mode ADOM. you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.

Normal mode is the default ADOM mode.

Show Answer Comment (0)

Question 67

Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

Both modes, forwarding and aggregation, support encryption of logs between devices.

In aggregation mode, you can forward logs to syslog and CEF servers as well.

Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.

Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.

Show Answer Comment (0)

Question 68

An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1.

What should the administrator do to solve this issue?

Use the execute sql-local rebuild-db command to rebuild all ADOM databases.

Use the execute sql-local rebuild-adom ADOM1 command to rebuild the ADOM database.

Use the execute sql-report run ADOM1 command to run a report.

Use the execute sql-local rebuild-adom root command to rebuild the ADOM database.

Show Answer Comment (0)

Question 69

Which statement is true regarding Macros on FortiAnalyzer?

Macros are ADOM specific and each ADOM will have unique macros relevant to that ADOM.

Macros are supported only on the FortiGate ADOM.

Macros are useful in generating excel log files automatically based on the reports settings.

Macros are predefined templates for reports and cannot be customized.

Show Answer Comment (0)

Question 70

Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.

Collector mode is the default operating mode.

When in collector mode. FortiAnalyzer supports event management and reporting features.

By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting

Show Answer Comment (0)

Total 137 questions