How Many Questions Of NSE5_FAZ-6.4 Questions Pool

NEW QUESTION 1
What statements are true regarding FortiAnalyzer 's treatment of high availability (HA) dusters? (Choose two)

• A. FortiAnalyzer distinguishes different devices by their serial number.
• B. FortiAnalyzer receives logs from d devices in a duster.
• C. FortiAnalyzer receives bgs only from the primary device in the cluster.
• D. FortiAnalyzer only needs to know (he serial number of the primary device in the cluster-it automaticaly discovers the other devices.

Answer: AB

NEW QUESTION 2
In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.
How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

• A. Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve
• B. Configure # set resolve-ip enable in the system FortiView settings
• C. Configure local DNS servers on FortiAnalyzer
• D. Resolve IP addresses on FortiGate

Answer: D

Explanation:
https://packetplant.com/fortigate-and-fortianalyzer-resolve-source-and-destination-ip/
“As a best practice, it is recommended to resolve IPs on the FortiGate end. This is because you get both
source and destination, and it offloads the work from FortiAnalyzer. On FortiAnalyzer, this IP resolution does destination IPs only”

NEW QUESTION 3
Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

• A. The total disk space is insufficient and you need to add other disk.
• B. CPU resources are too high.
• C. The ADOM disk quota is set too low based on log rates.
• D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.

Answer: C

Explanation:
https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG FAZ/1100_Storage/0017_Deleted%20device%20logs.htm https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/87802/automatic-deletion

NEW QUESTION 4
The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device. What can be the reason for this failure?

• A. FortiAnalyzer is in an HA cluster.
• B. ADOM mode should be set to advanced, in order to register the FortiClient EMS device.
• C. ADOMs are not enabled on FortiAnalyzer.
• D. A separate license is required on FortiAnalyzer in order to register the FortiClient EMS device.

Answer: C

NEW QUESTION 5
You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.
What does the disk quota refer to?

• A. The maximum disk utilization for each device in the ADOM
• B. The maximum disk utilization for the FortiAnalyzer model
• C. The maximum disk utilization for the ADOM type
• D. The maximum disk utilization for all devices in the ADOM

Answer: D

NEW QUESTION 6
When you perform a system backup, what does the backup configuration contain? (Choose two.)

• A. Generated reports
• B. Device list
• C. Authorized devices logs
• D. System information

Answer: BD

Explanation:
https://help.fortinet.com/fa/cli-olh/5-6-5/Content/Document/1400_execute/backup.htm

NEW QUESTION 7
Refer to the exhibit.

The exhibit shows “remoteservergroup” is an authentication server group with LDAP and RADIUS servers.
Which two statements express the significance of enabling “Match all users on remote server” when configuring a new administrator? (Choose two.)

• A. It creates a wildcard administrator using LDAP and RADIUS servers.
• B. Administrator can log in to FortiAnalyzer using their credentials on remote servers LDAP and RADIUS.
• C. Use remoteadmin from LDAP and RADIUS servers will be able to log in to FortiAnalyzer at anytime.
• D. It allows administrators to use two-factor authentication.

Answer: BC

NEW QUESTION 8
Which daemon is responsible for enforcing raw log file size?

• A. logfiled
• B. oftpd
• C. sqlplugind
• D. miglogd

Answer: A

NEW QUESTION 9
An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1.
What should the administrator do to solve this issue?

• A. Use the execute sql-local rebuild-db command to rebuild all ADOM databases.
• B. Use the execute sql-local rebuild-adom ADOM1 command to rebuild the ADOM database.
• C. Use the execute sql-report run ADOM1 command to run a report.
• D. Use the execute sql-local rebuild-adom root command to rebuild the ADOM database.

Answer: B

NEW QUESTION 10
An administrator has moved FortiGate A from the root ADOM to ADOM1. Which two statements are true regarding logs? (Choose two.)

• A. Analytics logs will be moved to ADOM1 from the root ADOM automatically.
• B. Archived logs will be moved to ADOM1 from the root ADOM automatically.
• C. Logs will be presented in both ADOMs immediately after the move.
• D. Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the ADOM1 SQL database.

Answer: BC

NEW QUESTION 11
By default, what happens when a log file reaches its maximum file size?

• A. FortiAnalyzer overwrites the log files.
• B. FortiAnalyzer stops logging.
• C. FortiAnalyzer rolls the active log by renaming the file.
• D. FortiAnalyzer forwards logs to syslog.

Answer: C

NEW QUESTION 12
Consider the CLI command:

What is the purpose of the command?

• A. To add a unique tag to each log to prove that it came from this FortiAnalyzer
• B. To add the MD5 hash value and authentication code
• C. To add a log file checksum
• D. To encrypt log communications

Answer: C

Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/cli-reference/849211/global

NEW QUESTION 13
In Log View, you can use the Chart Builder feature to build a dataset and chart based on the filtered search results.
Similarly, which feature you can use for FortiView?

• A. Export to Report Chart
• B. Export to PDF
• C. Export to Chart Builder
• D. Export to Custom Chart

Answer: A

NEW QUESTION 14
What is the purpose of a dataset query in FortiAnalyzer?

• A. It sorts log data into tables
• B. It extracts the database schema
• C. It retrieves log data from the database
• D. It injects log data into the database

Answer: C

NEW QUESTION 15
What is the recommended method of expanding disk space on a FortiAnalyzer VM?

• A. From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage
• B. From the VM host manager, expand the size of the existing virtual disk
• C. From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk
• D. From the VM host manager, add an additional virtual disk and rebuild your RAID array

Answer: A

Explanation:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD40848

NEW QUESTION 16
A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.
What can you do on FortiAnalyzer to accomplish this?

• A. Click FortiView and generate a report for that administrator.
• B. Click Task Monitor and view the tasks performed by that administrator.
• C. Click Log View and generate a report for that administrator.
• D. View the tasks performed by the rogue administrator in Fabric View.

Answer: B

NEW QUESTION 17
An administrator has configured the following settings:
config system global
set log-checksum md5-auth
end
What is the significance of executing this command?

• A. This command records the log file MD5 hash value.
• B. This command records passwords in log files and encrypts them.
• C. This command encrypts log transfer between FortiAnalyzer and other devices.
• D. This command records the log file MD5 hash value and authentication code.

Answer: D

NEW QUESTION 18
What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

• A. All FortiGates can send logs to FortiAnalyzer using the store and upload option.
• B. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.
• C. Both secure communications methods (SSL and IPsec) allow the store and upload option.
• D. Disk logging is enabled on the FortiGate through the CLI only.
• E. Disk logging is enabled by default on the FortiGate.

Answer: BCD

NEW QUESTION 19
Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)

• A. ADOMs are enabled by default.
• B. ADOMs constrain other administrator’s access privileges to a subset of devices in the device list.
• C. Once enabled, the Device Manager, FortiView, Event Management, and Reports tab display per ADOM.
• D. All administrators can create ADOMs--not just the admin administrator.

Answer: BC

NEW QUESTION 20
......