NSE5_FAZ-6.2

What is the purpose of employing RAID with FortiAnalyzer?A . To introduce redundancy to your log dataB . To provide data separation between ADOMsC . To separate analytical and archive dataD . To back up your logsView AnswerAnswer: A

Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy. What is the most likely problem?A . CPU resources are too highB . Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer deviceC . The total disk...

Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)A . Mail serverB . Output profileC . SFTP serverD . Report schedulingView AnswerAnswer: B,C Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/6d9f8fb5-6cf4-11e9-81a4-00505692583a/FortiAnalyzer-6.0.5-Administration-Guide.pdf (119)

By default, what happens when a log file reaches its maximum file size?A . FortiAnalyzer overwrites the log files.B . FortiAnalyzer stops logging.C . FortiAnalyzer rolls the active log by renaming the file.D . FortiAnalyzer forwards logs to syslog.View AnswerAnswer: C

Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)A . ADOMs are enabled by default.B . ADOMs constrain other administrator’s access privileges to a subset of devices in the device list.C . Once enabled, the Device Manager, FortiView, Event Management, and Reports tab display per ADOE ....

When you perform a system backup, what does the backup configuration contain? (Choose two.)A . Generated reportsB . Device listC . Authorized devices logsD . System informationView AnswerAnswer: B,D

Which two statements about log forwarding are true? (Choose two.)A . Forwarded logs cannot be filtered to match specific criteria.B . Logs are forwarded in real-time only.C . The client retains a local copy of the logs after forwarding.D . You can use aggregation mode only with another FortiAnalyzer.View AnswerAnswer:...

View the exhibit. What does the data point at 14:35 tell you?A . FortiAnalyzer is dropping logs.B . FortiAnalyzer is indexing logs faster than logs are being received.C . FortiAnalyzer has temporarily stopped receiving logs so older logs’ can be indexed.D . The sqlplugind daemon is ahead in indexing by...

Refer to the exhibit. What does the data point at 14:55 tell you?A . The received rate is almost at its maximum for this deviceB . The sqlplugind daemon is behind in log indexing by two logsC . Logs are being droppedD . Raw logs are reaching FortiAnalyzer faster than...

You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed. What is the recommended method to replace the disk?A . Shut down FortiAnalyzer and then replace the diskB . Downgrade your RAID level, replace the disk, and then upgrade...