Fortinet NSE 5 - FortiAnalyzer 7.2 Analyst (NSE5_FAZ-7.2) Free Practice Test

Question 1

Why must you wait for several minutes before you run a playbook that you just created?

A. FortiAnalyzer needs that time to debug the new playbook.

B. FortiAnalyzer needs that time to parse the new playbook.

C. FortiAnalyzer needs that time to back up the current playbooks.

D. FortiAnalyzer needs that time to ensure there are no other playbooks running.

Correct Answer: C

Question 2

An administrator has moved FortiGate A from the root ADOM to ADOM1.
Which two statements are true regarding logs? (Choose two.)

A. Analytics logs will be moved to ADOM1 from the root ADOM automatically.

B. Logs will be presented in both ADOMs immediately after the move.

C. Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the ADOM1 SQL database.

D. Archived logs will be moved to ADOM1 from the root ADOM automatically.

Correct Answer: C,D

Question 3

FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

A. To upload logs to an SFTP server

B. To send an identical set of logs to a second logging server

C. To encrypt log communication between devices

D. To prevent log modification during backup

Correct Answer: C

Question 4

For which two purposes would you use the commandset log checksum? (Choose two.)

A. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server

B. To send an identical set of logs to a second logging server

C. To encrypt log communications

D. To prevent log modification or tampering

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit.

Which statement is correct regarding the event displayed?

A. The risk source is isolated.

B. The security event risk is considered open.

C. An incident was created from this event.

D. The security risk was blocked or dropped.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

What are analytics logs on FortiAnalyzer?

A. Log type Traffic logs.

B. Raw logs that are compressed and saved to a log file.

C. Logs that are indexed and stored in the SQL.

D. Logs that roll over when the log file reaches a specific size.

Correct Answer: C

Question 7

The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device.
What can be the reason for this failure?

A. FortiAnalyzer is in an HA cluster.

B. A separate license is required on FortiAnalyzer in order to register the FortiClient EMS device.

C. ADOM mode should be set to advanced, in order to register the FortiClient EMS device.

D. ADOMs are not enabled on FortiAnalyzer.

Correct Answer: D

Question 8

Which two purposes does the auto cache setting on reports serve? (Choose two.)

A. It reduces report generation time.

B. It reduces the log insert lag rate.

C. It provides diagnostics on report generation time.

D. It automatically updates the hcache when new logs arrive.

Correct Answer: A,D

Welcome to TestSimulate

Fortinet NSE 5 - FortiAnalyzer 7.2 Analyst (NSE5_FAZ-7.2) Free Practice Test