Share Latest Jan-2024 NSE5_FAZ-7.0 DUMP with 116 Questions and Answers
PDF Dumps 2024 Exam Questions with Practice Test
Fortinet NSE5_FAZ-7.0 (Fortinet NSE 5 - FortiAnalyzer 7.0) Certification Exam is designed to test the knowledge and skills of individuals in deploying, administering, and troubleshooting Fortinet FortiAnalyzer 7.0. Fortinet NSE 5 - FortiAnalyzer 7.0 certification exam is intended for network administrators, system engineers, and security professionals who want to demonstrate their expertise in using FortiAnalyzer 7.0 to collect, correlate, and analyze network security data.
NEW QUESTION # 60
You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?
- A. Logs are dropped
- B. FortiAnalyzer uses log fetching to retrieve the logs when back online
- C. The logfiled process stores logs in offline mode
- D. FortiGate uses the miglogd process to cache the logs
Answer: D
Explanation:
NEW QUESTION # 61
Which two statements are correct regarding the export and import of playbooks? (Choose two.)
- A. Playbooks can be exported and imported only within the same FortiAnaryzer.
- B. You can export only one playbook at a time.
- C. A playbook that was disabled when it was exported, will be disabled when it is imported.
- D. You can import a playbook even if there is another one with the same name in the destination.
Answer: C,D
NEW QUESTION # 62
Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?
- A. IPS logs
- B. Web filter logs
- C. Application control logs
- D. Antivirus logs
Answer: B
Explanation:
Reference:
FortiAnalyzer_Admin_Guide/3600_FortiView/0200_Using_FortiView/1200_Compromised_hosts_page.htm?
TocPath=FortiView%7CUsing%20FortiView%7C_____6
NEW QUESTION # 63
Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?
- A. To resolve host names
- B. To properly correlate logs
- C. To use real-time forwarding
- D. To improve DNS response times
Answer: B
NEW QUESTION # 64
What is the purpose of the following CLI command?
- A. To add a log file checksum
- B. To encrypt log communications
- C. To add a unique tag to each log to prove that it came from this FortiAnalyzer
- D. To add the MD's hash value and authentication code
Answer: A
Explanation:
https://docs2.fortinet.com/document/fortianalyzer/6.0.3/cli-reference/849211/global
NEW QUESTION # 65
What is the purpose of a dataset query in FortiAnalyzer?
- A. It extracts the database schema
- B. It retrieves log data from the database
- C. It injects log data into the database
- D. It sorts log data into tables
Answer: B
NEW QUESTION # 66
Which SQL query is in the correct order to query the database in the FortiAnslyzer?
- A. SELECT devid FROM Slog GROOP BY devid WHERE * user' =* USERl'
- B. FROM Slog WHERE 'user* =' USERl' SELECT devid GROUP BY devid
- C. SELECT devid FROM Slog- WHERE *user' =' USERl' GROUP BY devid
- D. SELECT devid WHERE 'u3er'='USERl' FROM $ log GROUP BY devid
Answer: C
NEW QUESTION # 67
You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.
What does the disk quota refer to?
- A. The maximum disk utilization for each device in the ADOM
- B. The maximum disk utilization for the ADOM type
- C. The maximum disk utilization for all devices in the ADOM
- D. The maximum disk utilization for the FortiAnalyzer model
Answer: C
NEW QUESTION # 68
Refer to the exhibit.
The image displays the configuration of a FortiAnalyzer the administrator wants to join to an existing HA cluster.
What can you conclude from the configuration displayed?
- A. After joining to the cluster, this FortiAnalyzer will keep an updated log database.
- B. This FortiAnalyzer is configured to receive logs in its port1.
- C. This FortiAnalyzer will trigger a failover after losing communication with its peers for 10 seconds.
- D. This FortiAnalyzer will join to the existing HA cluster as the primary.
Answer: B
Explanation:
"If the preferred role is Primary, then this unit becomes the primary unit if it is configured first in a new HA cluster. If there is an existing primary unit, then this unit becomes a secondary unit." (https://docs.fortinet.com/document/fortianalyzer/7.0.5/administration-guide/275104)
NEW QUESTION # 69
What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?
- A. Valid FortiAnalyzer credentials
- B. A FortiGate ADOM
- C. The FortiGate serial number
- D. A pre-shared key
Answer: D
NEW QUESTION # 70
An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email.
What could be the problem?
- A. A trusted host is configured.
- B. Fortinet is assigned the Restricted_ User administrator profile.
- C. ADOM mode is configured with Advanced mode.
- D. Fortinet is assigned the Standard_ User administrator profile.
Answer: D
NEW QUESTION # 71
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A. A remote LDAP server
- B. A local wildcard administrator account
- C. A trusted host profile that restricts access to the LDAP group
- D. An administrator group
Answer: A,B
NEW QUESTION # 72
Which SQL query is in the correct order to query the database in the FortiAnslyzer?
- A. SELECT devid FROM Slog GROOP BY devid WHERE * user' =* USERl'
- B. FROM Slog WHERE 'user* =' USERl' SELECT devid GROUP BY devid
- C. SELECT devid FROM Slog- WHERE *user' =' USERl' GROUP BY devid
- D. SELECT devid WHERE 'u3er'='USERl' FROM $ log GROUP BY devid
Answer: C
Explanation:
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 259: The main clauses FortiAnalyzer reports use are as follows:
* FROM
* WHERE
* GROUP BY
* ORDER BY
* LIMIT
* OFFSET
Accordingly, following the SELECT keyword, the statement must be followed by one or more clauses in the order in which they appear in the table shown on this slide.
NEW QUESTION # 73
What are offline logs on FortiAnalyzer?
- A. Logs that are collected from offline devices after they boot up.
- B. Compressed logs, which are also known as archive logs, are considered to be offline logs.
- C. When you restart FortiAnalyzer. all stored logs are considered to be offline logs.
- D. Logs that are indexed and stored in the SQL database.
Answer: B
Explanation:
Reference:
Logs are received and saved in a log file on the FortiAnalyzer disks. Eventually, when the log file reaches a configured size, or at a set schedule, it is rolled over by being renamed. These files (rolled or otherwise) are known as archive logs and are considered offline so they don't offer immediate analytic support. Combined, they count toward the archive quota and retention limits, and they are deleted based on the ADOM data policy. FortiAnalyzer_7.0_Study_Guide-Online page 140
NEW QUESTION # 74
Which two statements are true regarding ADOM modes? (Choose two.)
- A. You can only change ADOM modes through CLI.
- B. In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADOM.
- C. Normal mode is the default ADOM mode.
- D. In an advanced mode ADOM. you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.
Answer: C,D
NEW QUESTION # 75
Refer to the exhibit.
Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)
- A. This feature is automatically enabled for scheduled reports.
- B. Reports will be cached in the memory.
- C. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.
- D. Report size will be optimized to conserve disk space on FortiAnalyzer.
Answer: A,C
NEW QUESTION # 76
......
Dumps for Free NSE5_FAZ-7.0 Practice Exam Questions: https://testking.practicedump.com/NSE5_FAZ-7.0-exam-questions.html