NSE5_FAZ-7.2 Exam Questions
155 real NSE5_FAZ-7.2 exam questions with expert-verified answers and explanations. Page 1 of 4.
- Question #1Log and Data Policy
Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)
reserved disk spacedisk quotaRAID levelstorage constraints - Question #2Log and Data Policy
View the exhibit: What does the 1000MB maximum for disk utilization refer to?
disk quotaADOM quotadisk utilizationstorage management - Question #3Log and Data Policy
You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?
ADOM migrationdatabase rebuildanalytics logslog management - Question #4Log and Data Policy
What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?
log rolloverlog archivinglog file sizedisk settings - Question #5FortiAnalyzer Deployment
What is the purpose of employing RAID with FortiAnalyzer?
RAIDdisk redundancylog data protectionstorage - Question #6Log and Data Policy
Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?
log fetchingarchived logslog retrievalFortiAnalyzer aggregation - Question #7FortiAnalyzer Deployment
What is the recommended method of expanding disk space on a FortiAnalyzer VM?
VM disk expansionLVMvirtual diskstorage management - Question #8Log and Data Policy
How are logs forwarded when FortiAnalyzer is using aggregation mode?
aggregation modelog forwardingscheduled uploadcontent files - Question #9Device Management
How do you restrict an administrator's access to a subset of your organization's ADOMs?
ADOM accessadministrator profileaccess controlADOM assignment - Question #10
In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)
- Question #11Troubleshooting
What can the CLI command # diagnose test application oftpd 3 help you to determine?
CLI diagnosticsoftpddevice connectionlog reception - Question #12Reports
What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?
FortiViewChart Builderdatasetreport chart - Question #13
In FortiAnalyzer's FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without...
- Question #14Reports
What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)
report uploadoutput profileexternal serverSFTP - Question #15Log and Data Policy
View the exhibit. Why is the total quota less than the total system storage?
disk quotasystem storagereserved spacestorage allocation - Question #16Reports
What purposes does the auto-cache setting on reports serve? (Choose two.)
auto-cachereport generationhcachereport optimization - Question #17FortiSoC
Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?
threat huntingproactive securityFortiSoCnetwork security management - Question #18Reports
How does FortiAnalyzer retrieve specific log data from the database?
SQL querydatabase retrievallog dataFROM statement - Question #19Device Management
On FortiAnalyzer, what is a wildcard administrator account?
wildcard administratorLDAP groupadmin account typesauthentication - Question #20
For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:
- Question #21
What FortiGate process caches logs when FortiAnalyzer is not reachable?
- Question #22
FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?
- Question #23
Which statements are correct regarding FortiAnalyzer reports? (Choose two)
- Question #24FortiAnalyzer Deployment
Which tabs do not appear when FortiAnalyzer is operating in Collector mode? (Choose two.)
collector modeoperating modesFortiViewEvent Management - Question #25
FortiAnalyzer centralizes which functions? (Choose three)
- Question #26
By default, what happens when a log file reaches its maximum file size?
- Question #27
Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)
- Question #28
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)
- Question #29
What are two of the key features of FortiAnalyzer? (Choose two.)
- Question #30
What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)
- Question #31FortiAnalyzer Deployment
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)
IPsecsecure communicationsFortiGate integrationCLI configuration - Question #32Log and Data Policy
Which two statements about log forwarding are true? (Choose two.)
log forwardingaggregation modelog retentionreal-time forwarding - Question #33
Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)
- Question #34Log and Data Policy
Consider the CLI command: What is the purpose of the command?
log checksumlog integrityCLIlog file verification - Question #35FortiAnalyzer Deployment
What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?
NTPlog correlationtime synchronizationdevice configuration - Question #36Device Management
What are two advantages of setting up fabric ADOM? (Choose two.)
fabric ADOMSecurity FabricADOM configurationlog correlation - Question #37
What is the purpose of a predefined template on the FortiAnalyzer?
- Question #38Device Management
For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)
SAMLidentity providerservice provideradministrator authentication - Question #39Reports
Which two purposes does the auto cache setting on reports serve? (Choose two.)
auto cachehcachereport generation timereport optimization - Question #40Log and Data Policy
What are offline logs on FortiAnalyzer?
offline logsarchive logscompressed logslog storage types - Question #41Log and Data Policy
Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)
log fetchingFortiAnalyzer-to-FortiAnalyzerhistorical datafirmware compatibility - Question #42Troubleshooting
An administrator has configured the following settings: config system fortiview settings set resolve-ip enable end What is the significance of executing this command?
FortiViewIP resolutionDNSCLI configuration - Question #43Device Management
Which two statements are true regarding ADOM modes? (Choose two.)
ADOM modesnormal modeadvanced modeVDOM assignment - Question #44Log and Data Policy
Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)
log forwardingaggregation modelog encryptionFortiAnalyzer forwarding - Question #45
An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1. What should the administrat...
- Question #46Reports
Which statement is true regarding Macros on FortiAnalyzer?
macrosADOM-specificreport templatesReports - Question #47FortiAnalyzer Deployment
Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)
collector modeanalyzer modeoperating modesdeployment architecture - Question #48Device Management
Refer to the exhibit. The exhibit shows "remoteservergroup" is an authentication server group with LDAP and RADIUS servers. Which two statements express the significance of enablin...
wildcard administratorremote authenticationLDAPRADIUS - Question #49Troubleshooting
A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer. What can y...
Task Monitoradministrator auditrogue adminactivity logging - Question #50Device Management
The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device. What can be the reason for this failure?
FortiClient EMSADOMdevice registrationADOMs enabled