Free Fortinet NSE5_FAZ-7.0 Study Guides Exam Questions and Answer
NSE5_FAZ-7.0 Exam Dumps, NSE5_FAZ-7.0 Practice Test Questions
Fortinet NSE5_FAZ-7.0 exam covers a variety of topics, including FortiAnalyzer 7.0 system settings, logs, and reports. NSE5_FAZ-7.0 exam also covers the configuration and management of FortiAnalyzer 7.0, including data collection, event management, and report generation. Candidates will also be tested on their knowledge of FortiAnalyzer 7.0's integration with other Fortinet products, such as FortiGate, FortiManager, and FortiSIEM.
NEW QUESTION # 15
On FortiAnalyzer, what is a wildcard administrator account?
- A. An account that permits access to members of an LDAP group
- B. An account that validates against any user account on a FortiAuthenticator
- C. An account that allows guest access with read-only privileges
- D. An account that requires two-factor authentication
Answer: A
Explanation:
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/747268/configuring-wildcard-admin-accounts
NEW QUESTION # 16
Refer to the exhibit.
What does the data point at 14:55 tell you?
- A. Logs are being dropped
- B. The received rate is almost at its maximum for this device
- C. Raw logs are reaching FortiAnalyzer faster than they can be indexed
- D. The sqlplugind daemon is behind in log indexing by two logs
Answer: C
NEW QUESTION # 17
Which statement correctly describes the management extensions available on FortiAnalyzer?
- A. Management extensions do not require additional licenses.
- B. Management extensions require a dedicated VM for best performance.
- C. Management extensions may require a minimum number of CPU cores to run.
- D. Management extensions allow FortiAnalyzer to act as a ForbSIEM supervisor.
Answer: C
Explanation:
Events in FortiAnalyzer will be in one of four statuses. The current status will determine if more actions need to be taken by the security team or not.
The possible statuses are:
Unhandled: The security event risk is not mitigated or contained, so it is considered open.
Contained: The risk source is isolated.
Mitigated: The security risk is mitigated by being blocked or dropped.
(Blank): Other scenarios.
FortiAnalyzer_7.0_Study_Guide-Online pag. 189.
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 189: Review the hardware requirements before you enable a management extension application. Some of them require a minimum amount of memory or a minimum number of CPU cores.
NEW QUESTION # 18
Refer to the exhibit.
Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)
- A. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.
- B. This feature is automatically enabled for scheduled reports.
- C. Report size will be optimized to conserve disk space on FortiAnalyzer.
- D. Reports will be cached in the memory.
Answer: A,B
NEW QUESTION # 19
Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.
What is the most likely problem?
- A. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device
- B. CPU resources are too high
- C. The total disk space is insufficient and you need to add other disk
- D. The ADOM disk quota is set too low, based on log rates
Answer: D
Explanation:
Reference:
20logs.htm
NEW QUESTION # 20
What can the CLI command # diagnose test application oftpd 3 help you to determine?
- A. What devices are registered and unregistered
- B. What devices and IP addresses are connecting to FortiAnalyzer
- C. What ADOMs are enabled and configured
- D. What logs, if any, are reaching FortiAnalyzer
Answer: B
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/cli-reference/395556/test#test_application
NEW QUESTION # 21
View the exhibit.
What does the data point at 14:35 tell you?
- A. FortiAnalyzer has temporarily stopped receiving logs so older logs' can be indexed.
- B. FortiAnalyzer is dropping logs.
- C. FortiAnalyzer is indexing logs faster than logs are being received.
- D. The sqlplugind daemon is ahead in indexing by one log.
Answer: C
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/47690/insert-rate-vs-receive-rate-widget
NEW QUESTION # 22
What is the purpose of output variables?
- A. To save all the task settings when a playbook is exported
- B. To use the output of the previous task as the input of the current task
- C. To store playbook execution statistics
- D. To display details of the connectors used by a playbook
Answer: C
NEW QUESTION # 23
What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?
- A. A FortiGate ADOM
- B. Valid FortiAnalyzer credentials
- C. A pre-shared key
- D. The FortiGate serial number
Answer: C
NEW QUESTION # 24
What statements are true regarding FortiAnalyzer 's treatment of high availability (HA) dusters? (Choose two)
- A. FortiAnalyzer receives bgs only from the primary device in the cluster.
- B. FortiAnalyzer receives logs from d devices in a duster.
- C. FortiAnalyzer distinguishes different devices by their serial number.
- D. FortiAnalyzer only needs to know (he serial number of the primary device in the cluster-it automaticaly discovers the other devices.
Answer: B,C
NEW QUESTION # 25
Which two statements are correct regarding the export and import of playbooks? (Choose two.)
- A. A playbook that was disabled when it was exported, will be disabled when it is imported.
- B. You can export only one playbook at a time.
- C. You can import a playbook even if there is another one with the same name in the destination.
- D. Playbooks can be exported and imported only within the same FortiAnaryzer.
Answer: A,C
NEW QUESTION # 26
What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?
- A. Custom View
- B. Export to Report Chart
- C. Chart Builder
- D. Dataset Library
Answer: C
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.0/cookbook/989203/building-charts-with-chart-builder
NEW QUESTION # 27
If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?
- A. Hot swap the disk
- B. Shut down FortiAnalyzer and replace the disk
- C. Take no action if the RAID level supports a failed disk
- D. Replace the disk and rebuild the RAID manually
Answer: B
Explanation:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD46446#:~:text=On%20FortiAnalyzer%2FFortiManager%20devices%20that,to%20exchanging%20the%20hard%20disk.
If a hard disk on a FortiAnalyzer unit fails, it must be replaced. On FortiAnalyzer devices that support hardware RAID, the hard disk can be replaced while the unit is still running - known as hot swapping. On FortiAnalyzer units with software RAID, the device must be shutdown prior to exchanging the hard disk.
NEW QUESTION # 28
By default, what happens when a log file reaches its maximum file size?
- A. FortiAnalyzer forwards logs to syslog.
- B. FortiAnalyzer stops logging.
- C. FortiAnalyzer rolls the active log by renaming the file.
- D. FortiAnalyzer overwrites the log files.
Answer: C
NEW QUESTION # 29
Which tabs do not appear when FortiAnalyzer is operating in Collector mode?
- A. Device Manger
- B. Reporting
- C. FortiView
- D. Event Management
Answer: D
NEW QUESTION # 30
Which statement is true regarding Macros on FortiAnalyzer?
- A. Macros are supported only on the FortiGate ADOM.
- B. Macros are ADOM specific and each ADOM will have unique macros relevant to that ADOM.
- C. Macros are predefined templates for reports and cannot be customized.
- D. Macros are useful in generating excel log files automatically based on the reports settings.
Answer: B
Explanation:
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 283: Note that macros are ADOM-specific and supported in FortiGate and FortiCarrier ADOMs only.
NEW QUESTION # 31
You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.
What is the recommended method to replace the disk?
- A. Downgrade your RAID level, replace the disk, and then upgrade your RAID level
- B. Clear all RAID alarms and replace the disk while FortiAnalyzer is still running
- C. Shut down FortiAnalyzer and then replace the disk
- D. Perform a hot swap
Answer: C
Explanation:
https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-swap-Hard-Disk-on-FortiAnalyzer/ta-p/194997?externalID=FD41397#:~:text=If%20a%20hard%20disk%20on,process%20known%20as%20hot%20swapping
NEW QUESTION # 32
View the exhibit.
Why is the total quota less than the total system storage?
- A. The logfiled process is just estimating the total quota
- B. Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files
- C. The oftpd process has not archived the logs yet
- D. 3.6% of the system storage is already being used.
Answer: B
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/368682/disk-space-allocation
NEW QUESTION # 33
How are logs forwarded when FortiAnalyzer is using aggregation mode?
- A. Logs are forwarded as they are received and content files are uploaded at a scheduled time.
- B. Logs and content files are stored and uploaded at a scheduled time.
- C. Logs are forwarded as they are received.
- D. Logs and content files are forwarded as they are received.
Answer: B
Explanation:
https://www.fortinetguru.com/2020/07/log-forwarding-fortianalyzer-fortios-6-2-3/
https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/420493/modes
NEW QUESTION # 34
Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)
- A. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version.
- B. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end.
- C. Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device.
- D. Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.
Answer: A,C
NEW QUESTION # 35
You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.
What does the disk quota refer to?
- A. The maximum disk utilization for the ADOM type
- B. The maximum disk utilization for the FortiAnalyzer model
- C. The maximum disk utilization for each device in the ADOM
- D. The maximum disk utilization for all devices in the ADOM
Answer: D
NEW QUESTION # 36
In Log View, you can use the Chart Builder feature to build a dataset and chart based on the filtered search results.
Similarly, which feature you can use for FortiView?
- A. Export to Custom Chart
- B. Export to PDF
- C. Export to Chart Builder
- D. Export to Report Chart
Answer: D
NEW QUESTION # 37
......
Latest NSE5_FAZ-7.0 Actual Free Exam Questions Updated 116 Questions: https://www.dumpstorrent.com/NSE5_FAZ-7.0-exam-dumps-torrent.html
Attested NSE5_FAZ-7.0 Dumps PDF Resource [2023]: https://drive.google.com/open?id=1QGnrtfx4UgpMK80Pz5B6BFc4fl7CShHT