ExamGecko
Search Search Login
Home Home / Fortinet / NSE5_FAZ-7.2
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which SQL query is in the correct order to query the database in the FortiAnslyzer?
Which two statements are true regarding ADOM modes? (Choose two.)
What purposes does the auto-cache setting on reports serve? (Choose two.)
Why run the command diagnose sql status sqlplugind?
Which statement correctly describes the management extensions available on FortiAnalyzer?
What is the recommended method of expanding disk space on a FortiAnalyzer VM?
Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?
Which two statements are correct regarding the export and import of playbooks? (Choose two.)
Which two elements are contained in a system backup created on FortiAnalyzer? (Choose two.)
An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email. What could be the problem?

Question 90 - NSE5_FAZ-7.2 discussion

Report
Export

Refer to the exhibit.

Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1:

Which filter will achieve the desired result?

A.
operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin
Answers
A.
operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin
B.
operation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin
Answers
B.
operation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin
C.
operation-login & dstip==10.1.1.210 & userl-admin
Answers
C.
operation-login & dstip==10.1.1.210 & userl-admin
D.
operation-login & performed_on=="GUI(10.1.1.210)' & user!=admin
Answers
D.
operation-login & performed_on=="GUI(10.1.1.210)' & user!=admin
Suggested answer: A

Explanation:

On there the task was to create a filter for failed logins from any other location but the local computer: "Add the text performed_on!~10.0.1.10. This includes any attempts coming from devices with an IP address that is not the one configured on the Local-Client computer."

Show Answer
asked 18/09/2024
David Gallegos
41 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms