[Mar-2022] Latest Fortinet NSE5_FAZ-6.4 exam dumps and online Test Engine
Fortinet NSE5_FAZ-6.4: Selling NSE 5 Network Security Analyst Products and Solutions
NEW QUESTION 31
What is the purpose of the following CLI command?
- A. To add a log file checksum
- B. To add a unique tag to each log to prove that it came from this FortiAnalyzer
- C. To encrypt log communications
- D. To add the MD's hash value and authentication code
Answer: A
Explanation:
https://docs2.fortinet.com/document/fortianalyzer/6.0.3/cli-reference/849211/global
NEW QUESTION 32
For which two purposes would you use the command set log checksum? (Choose two.)
- A. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server
- B. To send an identical set of logs to a second logging server
- C. To encrypt log communications
- D. To prevent log modification or tampering
Answer: C,D
NEW QUESTION 33
Which two purposes does the auto cache setting on reports serve? (Choose two.)
- A. It reduces report generation time.
- B. It reduces the log insert lag rate.
- C. It provides diagnostics on report generation time.
- D. It automatically updates the hcache when new logs arrive.
Answer: A,D
Explanation:
Reference:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/384416/how-auto-cache-works
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/86926/enabling-auto-cache
NEW QUESTION 34
What statements are true regarding disk log quota? (Choose two)
- A. The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.
- B. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.
- C. The FortiAnalyzer stops logging once the disk log quota is met.
- D. The FortiAnalyzer automatically sets the disk log quota based on the device.
Answer: A,B
NEW QUESTION 35
Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?
- A. To improve DNS response times
- B. To resolve host names
- C. To use real-time forwarding
- D. To properly correlate logs
Answer: D
Explanation:
NEW QUESTION 36
Refer to the exhibit.
Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)
- A. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.
- B. Report size will be optimized to conserve disk space on FortiAnalyzer.
- C. Reports will be cached in the memory.
- D. This feature is automatically enabled for scheduled reports.
Answer: A,B
NEW QUESTION 37
Which tabs do not appear when FortiAnalyzer is operating in Collector mode?
- A. Device Manger
- B. FortiView
- C. Reporting
- D. Event Management
Answer: D
NEW QUESTION 38
What is the purpose of a predefined template on the FortiAnalyzer?
- A. It contains predefined data to generate mock reports
- B. It specifies the report layout which contains predefined texts, charts, and macros
- C. It can be edited and modified as required
- D. It specifies report settings which contains time period, device selection, and schedule
Answer: B
Explanation:
Reference:
2300_Reports/0010_Predefined_reports.htm#:~:text=FortiAnalyzer%20includes%20a%20number%
20of,create%20and%2For%20build%20reports.&text=A%20template%20populates%20the%20Layout,that%
20is%20to%20be%20created.
https://help.fortinet.com/fa/faz50hlp/56/5-6-2/FMG-FAZ/2300_Reports/0010_Predefined_reports.htm
NEW QUESTION 39
Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?
- A. The ADOM disk quota is set too low based on log rates.
- B. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.
- C. CPU resources are too high.
- D. The total disk space is insufficient and you need to add other disk.
Answer: A
Explanation:
https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG FAZ/1100_Storage/0017_Deleted%20device%20logs.htm
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/87802/automatic-deletion
NEW QUESTION 40
What are offline logs on FortiAnalyzer?
- A. When you restart FortiAnalyzer. all stored logs are considered to be offline logs.
- B. Logs that are collected from offline devices after they boot up.
- C. Compressed logs, which are also known as archive logs, are considered to be offline logs.
- D. Logs that are indexed and stored in the SQL database.
Answer: C
NEW QUESTION 41
Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)
- A. Collector mode is the default operating mode.
- B. When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.
- C. When in collector mode. FortiAnalyzer supports event management and reporting features.
- D. By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting
Answer: B,D
Explanation:
Reference:
https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/312644/analyzer-collector-collaboration
NEW QUESTION 42
What are the operating modes of FortiAnalyzer? (Choose two)
- A. Standalone
- B. Collector
- C. Manager
- D. Analyzer
Answer: B,D
NEW QUESTION 43
An administrator has configured the following settings:
config system fortiview settings
set resolve-ip enable
end
What is the significance of executing this command?
- A. It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.
- B. It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.
- C. Use this command only if the source IP addresses are not resolved on FortiGate.
- D. You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.
Answer: A
NEW QUESTION 44
FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.
What is the most likely problem?
- A. CPU resources are too high
- B. Disk utilization for archive logs is set for 15 days
- C. Logs are rolling before the report is run
- D. Quota enforcement is acting on analytical data before a report is complete
Answer: C
NEW QUESTION 45
On the RAID management page, the disk status is listed as Initializing.
What does the status Initializing indicate about what the FortiAnalyzer is currently doing?
- A. FortiAnalyzer is ensuring that the parity data of a redundant drive is valid
- B. FortiAnalyzer is functioning normally
- C. FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant
- D. FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state
Answer: C
Explanation:
Reference:
8977-00505692583a/FortiAnalyzer-5.6.10-Administration-Guide.pdf (40)
NEW QUESTION 46
......
New 2022 NSE5_FAZ-6.4 Test Tutorial (Updated 88 Questions): https://www.braindumpquiz.com/NSE5_FAZ-6.4-exam-material.html
Reliable NSE5_FAZ-6.4 Exam Tips Test Pdf Exam Material: https://drive.google.com/open?id=1CPuI8EQ1tZ-hOo9LXEhAVTsdV-Tg6Imd