Try Free Fortinet NSE5_FAZ-6.4 Exam Questions To Test Yourself

test2022-01-20T06:23:04+00:00

By test Fortinet NSE 5-FortiAnalyzer 6.4, NSE5_FAZ-6.4 dumps, NSE5_FAZ-6.4 questions and answers 0 Comments

Fortinet NSE 5-FortiAnalyzer 6.4 exam is part of the NSE 5 Network Security Analyst program, and recognizes the successful candidate’s knowledge of and expertise with FortiAnalyzer. The exam tests applied knowledge of FortiAnalyzer configuration, operation, and day-to-day administration, and includes operational scenarios, system configuration, device registration, and troubleshooting.

FreeTestShare Fortinet NSE5_FAZ-6.4 Practice Exam includes real exam questions and answers, allowing you to quickly learn about the topics included in the NSE5_FAZ-6.4 exam! We provide free access to the most recent NSE5_FAZ-6.4 practice exam questions and answers. You can practice the most recent NSE5_FAZ-6.4 exam questions online!

Page 1 of 3

1. How do you restrict an administrator’s access to a subset of your organization’s ADOMs?

Set the ADOM mode to Advanced

Assign the ADOMs to the administrator’s account

Configure trusted hosts

Assign the default Super_User administrator profile

2. What are offline logs on FortiAnalyzer?

Compressed logs, which are also known as archive logs, are considered to be offline logs.

When you restart FortiAnalyzer. all stored logs are considered to be offline logs.

Logs that are indexed and stored in the SQL database.

Logs that are collected from offline devices after they boot up.

3. Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.

Collector mode is the default operating mode.

When in collector mode. FortiAnalyzer supports event management and reporting features.

By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting

4. In Log View, you can use the Chart Builder feature to build a dataset and chart based on the filtered search results.

Similarly, which feature you can use for FortiView?

Export to Report Chart

Export to PDF

Export to Chart Builder

Export to Custom Chart

5. Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

In aggregation mode, you can forward logs to syslog and CEF servers as well.

Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.

Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.

Both modes, forwarding and aggregation, support encryption of logs between devices.

6. What two things should an administrator do to view Compromised Hosts on FortiAnalyzer? (Choose two.)

Enable web filtering in firewall policies on FortiGate devices, and make sure these logs are sent to FortiAnalyzer.

Enable device detection on an interface on the FortiGate devices that are connected to the FortiAnalyzer.

Subscribe FortiAnalyzer to FortiGuard to keep its local threat database up-to-date.

Make sure all endpoints are reachable by FortiAnalyzer.

7. For which two purposes would you use the command set log checksum? (Choose two.)

To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server

To prevent log modification or tampering

To encrypt log communications

To send an identical set of logs to a second logging server

8. Which statements are correct regarding FortiAnalyzer reports? (Choose two)

FortiAnalyzer provides the ability to create custom reports.

FortiAnalyzer glows you to schedule reports to run.

FortiAnalyzer includes pre-defined reports only.

FortiAnalyzer allows reporting for FortiGate devices only.

9. View the exhibit.

Why is the total quota less than the total system storage?

3.6% of the system storage is already being used.

Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files

The oftpd process has not archived the logs yet

The logfiled process is just estimating the total quota

10. FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.

What is the most likely problem?

Quota enforcement is acting on analytical data before a report is complete

Logs are rolling before the report is run

CPU resources are too high

Disk utilization for archive logs is set for 15 days

Page 2 of 3

11. What is the purpose of employing RAID with FortiAnalyzer?

To introduce redundancy to your log data

To provide data separation between ADOMs

To separate analytical and archive data

To back up your logs

12. Which statement is true regarding Macros on FortiAnalyzer?

Macros are ADOM specific and each ADOM will have unique macros relevant to that ADO

Macros are supported only on the FortiGate ADO

Macros are useful in generating excel log files automatically based on the reports settings.

Macros are predefined templates for reports and cannot be customized.

13. Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated.

Must establish an IPsec tunnel ID and pre-shared key.

IPsec cannot be enabled if SSL is enabled as well.

IPsec is only enabled through the CLI on FortiAnalyzer.

14. What is the purpose of a dataset query in FortiAnalyzer?

It sorts log data into tables

It extracts the database schema

It retrieves log data from the database

It injects log data into the database

15. Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

FortiAnalyzer HA can function without VRR

and VRRP is required only if you have more than two FortiAnalyzer devices in a cluster.

FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.

All devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.

FortiAnalyzer HA implementation is supported by many public cloud infrastructures such as AWS, Microsoft Azure, and Google Cloud.

16. Which daemon is responsible for enforcing raw log file size?

logfiled

oftpd

sqlplugind

miglogd

17. If you upgrade the FortiAnalyzer firmware, which report element can be affected?

Custom datasets

Report scheduling

Report settings

Output profiles

18. What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

All FortiGates can send logs to FortiAnalyzer using the store and upload option.

Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.

Both secure communications methods (SSL and IPsec) allow the store and upload option.

Disk logging is enabled on the FortiGate through the CLI only.

Disk logging is enabled by default on the FortiGate.

19. What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

Log correlation

Host name resolution

Log collection

Real-time forwarding

20. Refer to the exhibit.

The exhibit shows “remoteservergroup” is an authentication server group with LDAP and RADIUS servers.

Which two statements express the significance of enabling “Match all users on remote server” when configuring a new administrator? (Choose two.)

It creates a wildcard administrator using LDAP and RADIUS servers.

Administrator can log in to FortiAnalyzer using their credentials on remote servers LDAP and RADIU

Use remoteadmin from LDAP and RADIUS servers will be able to log in to FortiAnalyzer at anytime.

It allows administrators to use two-factor authentication.

Page 3 of 3

21. Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

SSL is the default setting.

SSL communications are auto-negotiated between the two devices.

SSL can send logs in real-time only.

SSL encryption levels are globally set on FortiAnalyzer.

FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.

22. What is the purpose of the following CLI command?

To add a log file checksum

To add the MD’s hash value and authentication code

To add a unique tag to each log to prove that it came from this FortiAnalyzer

To encrypt log communications