Top Tips Of Replace NSE5_FAZ-6.2 Dump

NEW QUESTION 1
Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

• A. Log upload
• B. Indicators of Compromise
• C. Log forwarding an aggregation mode
• D. Log fetching

Answer: D

NEW QUESTION 2
What FortiGate process caches logs when FortiAnalyzer is not reachable?

• A. logfiled
• B. sqlplugind
• C. oftpd
• D. miglogd

Answer: D

NEW QUESTION 3
What is the recommended method of expanding disk space on a FortiAnalyzer VM?

• A. From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage
• B. From the VM host manager, expand the size of the existing virtual disk
• C. From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk
• D. From the VM host manager, add an additional virtual disk and rebuild your RAID array

Answer: A

NEW QUESTION 4
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

• A. Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated.
• B. Must establish an IPsec tunnel ID and pre-shared key.
• C. IPsec cannot be enabled if SSL is enabled as well.
• D. IPsec is only enabled through the CLI on FortiAnalyzer.

Answer: C

NEW QUESTION 5
Which statements are correct regarding FortiAnalyzer reports? (Choose two)

• A. FortiAnalyzer provides the ability to create custom reports.
• B. FortiAnalyzer glows you to schedule reports to run.
• C. FortiAnalyzer includes pre-defined reports only.
• D. FortiAnalyzer allows reporting for FortiGate devices only.

Answer: AB

NEW QUESTION 6
Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

• A. The total disk space is insufficient and you need to add other disk.
• B. CPU resources are too high.
• C. The ADOM disk quota is set too low based on log rates.
• D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.

Answer: C

NEW QUESTION 7
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

• A. SSL is the default setting.
• B. SSL communications are auto-negotiated between the two devices.
• C. SSL can send logs in real-time only.
• D. SSL encryption levels are globally set on FortiAnalyzer.
• E. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.

Answer: AD

NEW QUESTION 8
On FortiAnalyzer, what is a wildcard administrator account?

• A. An account that permits access to members of an LDAP group
• B. An account that allows guest access with read-only privileges
• C. An account that requires two-factor authentication
• D. An account that validates against any user account on a FortiAuthenticator

Answer: D

NEW QUESTION 9
What purposes does the auto-cache setting on reports serve? (Choose two.)

• A. To reduce report generation time
• B. To automatically update the hcache when new logs arrive
• C. To reduce the log insert lag rate
• D. To provide diagnostics on report generation time

Answer: AB

NEW QUESTION 10
What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

• A. Chart Builder
• B. Export to Report Chart
• C. Dataset Library
• D. Custom View

Answer: A

NEW QUESTION 11
In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

• A. Remote logging must be enabled on FortiGate
• B. Log encryption must be enabled
• C. ADOMs must be enabled
• D. FortiGate must be registered with FortiAnalyzer

Answer: AD

NEW QUESTION 12
View the exhibit.

Why is the total quota less than the total system storage?

• A. 3.6% of the system storage is already being used.
• B. Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files
• C. The oftpd process has not archived the logs yet
• D. The logfiled process is just estimating the total quota

Answer: B

NEW QUESTION 13
How do you restrict an administrator’s access to a subset of your organization’s ADOMs?

• A. Set the ADOM mode to Advanced
• B. Assign the ADOMs to the administrator’s account
• C. Configure trusted hosts
• D. Assign the default Super_User administrator profile

Answer: B

NEW QUESTION 14
FortiAnalyzer centralizes which functions? (Choose three)

• A. Network analysis
• B. Graphical reporting
• C. Content archiving / data mining
• D. Vulnerability assessment
• E. Security log analysis / forensics

Answer: BCE

NEW QUESTION 15
How does FortiAnalyzer retrieve specific log data from the database?

• A. SQL FROM statement
• B. SQL GET statement
• C. SQL SELECT statement
• D. SQL EXTRACT statement

Answer: C

NEW QUESTION 16
......