Fortinet NSE 5 - FortiAnalyzer 6.4 (NSE5_FAZ-6.4) Free Practice Test

Question 1

For which two purposes would you use the command set log checksum? (Choose two.)

A. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server

B. To send an identical set of logs to a second logging server

C. To encrypt log communications

D. To prevent log modification or tampering

Correct Answer: A,D

Question 2

What are analytics logs on FortiAnalyzer?

A. Log type Traffic logs.

B. Raw logs that are compressed and saved to a log file.

C. Logs that are indexed and stored in the SQL.

D. Logs that roll over when the log file reaches a specific size.

Correct Answer: C

Question 3

What is Log Insert Lag Time on FortiAnalyzer?

A. The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.

B. The amount of time FortiAnalyzer takes to receive logs from a registered device

C. The amount of lag time that occurs when the administrator is rebuilding the ADOM database.

D. The number of times in the logs where end users experienced slowness while accessing resources.

Correct Answer: A

Question 4

If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

A. Replace the disk and rebuild the RAID manually

B. Hot swap the disk

C. Take no action if the RAID level supports a failed disk

D. Shut down FortiAnalyzer and replace the disk

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

A. FortiGate must be registered with FortiAnalyzer

B. ADOMs must be enabled

C. Log encryption must be enabled

D. Remote logging must be enabled on FortiGate

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally?
(Choose two.)

A. Mail server

B. SFTP server

C. Output profile

D. Report scheduling

Correct Answer: A,C

Question 7

What FortiGate process caches logs when FortiAnalyzer is not reachable?

A. oftpd

B. logfiled

C. miglogd

D. sqlplugind

Correct Answer: C

Question 8

You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.
What does the disk quota refer to?

A. The maximum disk utilization for all devices in the ADOM

B. The maximum disk utilization for each device in the ADOM

C. The maximum disk utilization for the FortiAnalyzer model

D. The maximum disk utilization for the ADOM type

Correct Answer: A

Question 9

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

A. A remote LDAP server

B. A local wildcard administrator account

C. An administrator group

D. A trusted host profile that restricts access to the LDAP group

Correct Answer: A,B

Question 10

Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

A. Indicators of Compromise

B. Log forwarding an aggregation mode

C. Log upload

D. Log fetching

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet NSE 5 - FortiAnalyzer 6.4 (NSE5_FAZ-6.4) Free Practice Test