Fortinet NSE5_FAZ-7.0 Fortinet NSE 5 – FortiAnalyzer 7.0 Online Training
Fortinet NSE5_FAZ-7.0 Online Training
The questions for NSE5_FAZ-7.0 were last updated at Nov 19,2024.
- Exam Code: NSE5_FAZ-7.0
- Exam Name: Fortinet NSE 5 - FortiAnalyzer 7.0
- Certification Provider: Fortinet
- Latest update: Nov 19,2024
Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?
- A . Antivirus logs
- B . Web filter logs
- C . IPS logs
- D . Application control logs
B
Explanation:
Reference: https://help.fortinet.com/fa/faz50hlp/60/6-0-2/Content/FortiAnalyzer_Admin_Guide/3600_FortiView/0200_Using_FortiView/1200_Compromised_hosts_page.htm?TocPath=FortiView%7CUsing%20FortiView%7C_____6
The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device.
What can be the reason for this failure?
- A . FortiAnalyzer is in an HA cluster.
- B . ADOM mode should be set to advanced, in order to register the FortiClient EMS device.
- C . ADOMs are not enabled on FortiAnalyzer.
- D . A separate license is required on FortiAnalyzer in order to register the FortiClient EMS device.
C
Explanation:
Reference: https://help.fortinet.com/fa/faz50hlp/56/5-6-2/FMG-FAZ/0800_ADOMs/0015_FortiClient%20and%20ADOMs.htm
Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)
- A . When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.
- B . Collector mode is the default operating mode.
- C . When in collector mode. FortiAnalyzer supports event management and reporting features.
- D . By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting
A,D
Explanation:
Reference:
https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/227478/collector-mode
https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/312644/analyzer-collector-collaboration
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A . A local wildcard administrator account
- B . A remote LDAP server
- C . A trusted host profile that restricts access to the LDAP group
- D . An administrator group
A,B
Explanation:
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD38567
If you upgrade the FortiAnalyzer firmware, which report element can be affected?
- A . Custom datasets
- B . Report scheduling
- C . Report settings
- D . Output profiles
A
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/upgrade-guide/669300/checking-reports
If you upgrade your FortiAnalyzer firmware, what report elements can be affected?
- A . Output profiles
- B . Report settings
- C . Report scheduling
- D . Custom datasets
What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?(Choose two.)
- A . SFTP, FTP, or SCP server
- B . Mail server
- C . Output profile
- D . Report scheduling
B,C
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.0.2/administration-guide/598322/creating-output-profiles
Which two statements express the advantages of grouping similar reports? (Choose two.)
- A . Improve report completion time.
- B . Conserve disk space on FortiAnalyzer by grouping multiple similar reports.
- C . Reduce the number of hcache tables and improve auto-hcache completion time.
- D . Provides a better summary of reports.
What purposes does the auto-cache setting on reports serve? (Choose two.)
- A . To reduce report generation time
- B . To automatically update the hcache when new logs arrive
- C . To reduce the log insert lag rate
- D . To provide diagnostics on report generation time
A,B
Explanation:
Reference: https://docs.fortinet.com/document/fortianalyzer/6.0.0/administration-guide/282280/enabling-autocache
What are analytics logs on FortiAnalyzer?
- A . Log type Traffic logs.
- B . Logs that roll over when the log file reaches a specific size.
- C . Logs that are indexed and stored in the SQL.
- D . Raw logs that are compressed and saved to a log file.