NSE5_FAZ-6.2 Exam Questions

An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network. W...

Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)

Refer to the exhibit. Why is the total quota less than the total system storage?

For which two purposes would you use the command set log checksum? (Choose two.)

Refer to the exhibit. What does the data point at 14:55 tell you?

You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed. What is the recommended method to replace the disk?

On the RAID management page, the disk status is listed as Initializing. What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IP addres...

You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used. What does the disk quota refer to?

Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

You need to upgrade your FortiAnalyzer firmware. temporarily unavailable?

After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command? execute sql-local rebuild-adom <new-...

If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe, from another FortiAnalyzer device?

If you upgrade the FortiAnalyzer firmware, which report element can be affected?

FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days. What is the most likely problem?

Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Which two purposes does the auto-cache setting on reports serve? (Choose two.)

In order for FortiAnalyzer to collect logs from a FortiGate device, which two configurations are required? (Choose two.)

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two....

When you perform a system backup, what does the backup configuration contain? (Choose two.)

Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

What is the purpose of a dataset query in FortiAnalyzer?

Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy. What is the most likely problem?

Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log

Which two statements about log forwarding are true? (Choose two.)

Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

You have moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

Consider the CLI command: What is the purpose of the command?

How are logs forwarded when FortiAnalyzer is configured to use aggregation mode?

Refer to the exhibit. What does the data point at 14:35 tell you?

What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

FortiAnalyzer uses the Optimized Fabric Transfer Protocol (OFTP) over SSL for which purpose?

What are two advantages of setting up fabric ADOM? (Choose two.)

What is the purpose of a predefined template on the FortiAnalyzer?

How does FortiAnalyzer retrieve specific log data from the database?

Which FortiGate process caches logs when FortiAnalyzer is not reachable?

Refer to the exhibit. What does the 1000MB maximum for disk utilization refer to?

For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)