NSE5_FAZ-5.4 Exam Questions

How are logs forwarded when FortiAnalyzer is using aggregation mode?

DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)

Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two)

Which statement is correct? FortiAnalyzer collects and aggregates log data from:

What are two of the key features of FortiAnalyzer? (Choose two)

What statements are true regarding FortiAnalyzer's treatment of high availability (HA) clusters? (Choose two)

What FortiGate process caches logs when FortiAnalyzer is not reachable?

What is the purpose of the following CLI command?

Consider the following scenario: The FortiAnalyzer administrator creates a custom dataset. The Log type is set to Traffic and the Time Period is set to Last 30 days. The following...

By default, what happens when a log file reaches its maximum file size?

What types of logs will FortiAnalyzer store? (Select one)

What statements are true regarding encryption settings and levels? (Choose three)

What database language does FortiAnalyzer use for logging and reporting?

What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three)

What are the methods available to register a device? (Choose two)

In FortiAnalyzer's FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, withou...

What is the purpose of employing RAID with FortiAnalyzer?

What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

View the exhibit. Why is the total quota less than the total system storage?

In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

What can the CLI command # diagnose test application oftpd 3 help you to determine?

If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

On FortiAnalyzer, what is a wildcard administrator account?

Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

FortiAnalyzer uses the Optimized Fabric Transfer Protocol (OFTP) over SSL for what purpose?

What is the recommended method of expanding disk space on a FortiAnalyzer VM?

What must you configure on FortiAnalyzer to upload a Fortianalyzer report to a supported external server? (Choose two.)

View the exhibit. What does the 1000 MB maximum for disk utilization refer to?

What purposes does the auto-cache setting on reports serve? (Choose two.)

View the exhibit. What does the data point at 14:35 tell you?

You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

Which statement is true regarding FortiAnalyzer models?

How does FortiAnalyzer retrieve specific log data from the database?

Logs are being deleted from one of your ADOMs earlier than the configured setting for archiving in your data policy. What is the most likely problem?

How do you restrict an administrator's access to a subset of your organization's ADOMs?

What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

Which statements are correct regarding FortiAnalyzer reports? (Choose two)

What are the operating modes of FortiAnalyzer? (Choose two)

What s 'hot swapping'?

Which tabs do not appear when FortiAnalyzer is operating in Collector mode? (Choose two.)

When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search option. What is a valid reason for using the Full Search option, instead?

Both the FortiGate and FortiAnalyzer units can notify administrators when certain alert conditions are met. Considering this, which of the following statements is NOT correct?

For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

FortiAnalyzer centralizes which functions? (Choose three)

What statements are true regarding FortiAnalyzer 's treatment of high availability (HA) dusters? (Choose two)

What statements are true regarding disk log quota? (Choose two)

A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit. Which of the following statements best describes the reason why the FortiGate 60B unit is unab...

A FortiAnalyzer device could use which security method to secure the transfer of log data from FortiGate devices?