2022 The Most Effective NSE5_FAZ-7.0 with 116 Questions Answers [Q24-Q41]

4.7/5 - (6 votes)

2022 The Most Effective NSE5_FAZ-7.0 with 116 Questions Answers

Try Free and Start Using Realistic Verified NSE5_FAZ-7.0 Dumps Instantly.

Q24. Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

FROM

LIMIT

WHERE

ORDER BY

Reference:

Q25. What is the purpose of a predefined template on the FortiAnalyzer?

It can be edited and modified as required

It specifies the report layout which contains predefined texts, charts, and macros

It specifies report settings which contains time period, device selection, and schedule

It contains predefined data to generate mock reports

Reference:
2300_Reports/0010_Predefined_reports.htm#:~:text=FortiAnalyzer%20includes%20a%20number%
20of,create%20and%2For%20build%20reports.&text=A%20template%20populates%20the%20Layout,that%
20is%20to%20be%20created.
https://help.fortinet.com/fa/faz50hlp/56/5-6-2/FMG-FAZ/2300_Reports/0010_Predefined_reports.htm

Q26. Refer to the exhibit.

What does the data point at 14:55 tell you?

The received rate is almost at its maximum for this device

The sqlplugind daemon is behind in log indexing by two logs

Logs are being dropped

Raw logs are reaching FortiAnalyzer faster than they can be indexed

Q27. What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

RADIUS

Local

LDAP

PKI

TACACS+

Q28. What is the purpose of the following CLI command?

To add a log file checksum

To add the MD’s hash value and authentication code

To add a unique tag to each log to prove that it came from this FortiAnalyzer

To encrypt log communications

https://docs2.fortinet.com/document/fortianalyzer/6.0.3/cli-reference/849211/global

Q29. What is the recommended method of expanding disk space on a FortiAnalyzer VM?

From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage

From the VM host manager, expand the size of the existing virtual disk

From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk

From the VM host manager, add an additional virtual disk and rebuild your RAID array

https://kb.fortinet.com/kb/documentLink.do?externalID=FD40848

Q30. Which statement correctly describes the management extensions available on FortiAnalyzer?

Management extensions do not require additional licenses.

Management extensions allow FortiAnalyzer to act as a ForbSIEM supervisor.

Management extensions require a dedicated VM for best performance.

Management extensions may require a minimum number of CPU cores to run.

Q31. Which two purposes does the auto cache setting on reports serve? (Choose two.)

It automatically updates the hcache when new logs arrive.

It provides diagnostics on report generation time.

It reduces the log insert lag rate.

It reduces report generation time.

Reference:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/384416/how-auto-cache-works
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/86926/enabling-auto-cache

Q32. Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

SSL is the default setting.

SSL communications are auto-negotiated between the two devices.

SSL can send logs in real-time only.

SSL encryption levels are globally set on FortiAnalyzer.

FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.

Q33. An administrator has moved FortiGate A from the root ADOM to ADOM1.
Which two statements are true regarding logs? (Choose two.)

Analytics logs will be moved to ADOM1 from the root ADOM automatically.

Archived logs will be moved to ADOM1 from the root ADOM automatically.

Logs will be presented in both ADOMs immediately after the move.

Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the ADOM1 SQL database.

Q34. On FortiAnalyzer, what is a wildcard administrator account?

An account that permits access to members of an LDAP group

An account that allows guest access with read-only privileges

An account that requires two-factor authentication

An account that validates against any user account on a FortiAuthenticator

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/747268/configuring-wildcard-admin-accounts

Q35. Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

SMS

SNMP

Reference:
FortiAnalyzer_Admin_Guide/1800_Events/0200_Event_handlers/0600_Create_event_handlers.htm

Q36. Refer to the exhibits.

How many events will be added to the incident created after running this playbook?

Ten events will be added.

No events will be added.

Five events will be added.

Thirteen events will be added.

Q37. Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Antivirus logs

Web filter logs

IPS logs

Application control logs

Reference:
FortiAnalyzer_Admin_Guide/3600_FortiView/0200_Using_FortiView/1200_Compromised_hosts_page.htm?
TocPath=FortiView%7CUsing%20FortiView%7C_____6

Q38. Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

The total disk space is insufficient and you need to add other disk.

CPU resources are too high.

The ADOM disk quota is set too low based on log rates.

Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.

https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG FAZ/1100_Storage/0017_Deleted%20device%20logs.htm
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/87802/automatic-deletion

Q39. In Log View, you can use the Chart Builder feature to build a dataset and chart based on the filtered search results.
Similarly, which feature you can use for FortiView?

Export to Report Chart

Export to PDF

Export to Chart Builder

Export to Custom Chart

Q40. When working with FortiAnalyzer reports, what is the purpose of a dataset?

To provide the layout used for reports

To define the chart type to be used

To retrieve data from the database

To set the data included in templates

Q41. Which statements are correct regarding FortiAnalyzer reports? (Choose two)

FortiAnalyzer provides the ability to create custom reports.

FortiAnalyzer glows you to schedule reports to run.

FortiAnalyzer includes pre-defined reports only.

FortiAnalyzer allows reporting for FortiGate devices only.

Loading …

Fortinet NSE5_FAZ-7.0 Exam Syllabus Topics:

Topic	Details
Topic 1	Explain SOC features in FortiAnalyzer Perform initial configuration
Topic 2	Customize charts and datasets Explain playbook components
Topic 3	Configure high availability (HA) Troubleshoot and manage logs
Topic 4	Troubleshoot device communication issues Configure administrative access

Download Free Latest Exam NSE5_FAZ-7.0 Certified Sample Questions: https://www.testsimulate.com/NSE5_FAZ-7.0-study-materials.html

Fortinet NSE5_FAZ-7.0 Exam Syllabus Topics:

Leave a Reply Cancel reply