[UPDATED 2022] Free Fortinet NSE5_FAZ-6.4 Exam Questions Self-Assess Preparation
NSE5_FAZ-6.4 Free Sample Questions to Practice One Year Update
NEW QUESTION 30
How does FortiAnalyzer retrieve specific log data from the database?
- A. SQL GET statement
- B. SQL SELECT statement
- C. SQL FROM statement
- D. SQL EXTRACT statement
Answer: C
Explanation:
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/137bb60e-ff37-11e8-8524-f8bc1258b856/fortianalyzer-fortigate-sql-technote-40-mr2.pdf
NEW QUESTION 31
For which two purposes would you use the command set log checksum? (Choose two.)
- A. To send an identical set of logs to a second logging server
- B. To prevent log modification or tampering
- C. To encrypt log communications
- D. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server
Answer: B,C
NEW QUESTION 32
How can you configure FortiAnalyzer to permit administrator logins from only specific locations?
- A. Use static routes
- B. Use secure protocols
- C. Use administrative profiles
- D. Use trusted hosts
Answer: D
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/186508/trusted-hosts
NEW QUESTION 33
Refer to the exhibit.
The exhibit shows "remoteservergroup" is an authentication server group with LDAP and RADIUS servers.
Which two statements express the significance of enabling "Match all users on remote server" when configuring a new administrator? (Choose two.)
- A. It creates a wildcard administrator using LDAP and RADIUS servers.
- B. Use remoteadmin from LDAP and RADIUS servers will be able to log in to FortiAnalyzer at anytime.
- C. It allows administrators to use two-factor authentication.
- D. Administrator can log in to FortiAnalyzer using their credentials on remote servers LDAP and RADIUS.
Answer: A,D
NEW QUESTION 34
What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?
- A. Custom View
- B. Dataset Library
- C. Export to Report Chart
- D. Chart Builder
Answer: D
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.0/cookbook/989203/building-charts-with-chart-builder
NEW QUESTION 35
On the RAID management page, the disk status is listed as Initializing.
What does the status Initializing indicate about what the FortiAnalyzer is currently doing?
- A. FortiAnalyzer is functioning normally
- B. FortiAnalyzer is ensuring that the parity data of a redundant drive is valid
- C. FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state
- D. FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant
Answer: D
Explanation:
Reference:
8977-00505692583a/FortiAnalyzer-5.6.10-Administration-Guide.pdf (40)
NEW QUESTION 36
For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:
- A. Use an NTP server
- B. Use DNS
- C. Use real-time forwarding
- D. Use host name resolution
Answer: A
NEW QUESTION 37
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)
- A. IPsec cannot be enabled if SSL is enabled as well.
- B. Must establish an IPsec tunnel ID and pre-shared key.
- C. IPsec is only enabled through the CLI on FortiAnalyzer.
- D. Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated.
Answer: A
NEW QUESTION 38
If you upgrade the FortiAnalyzer firmware, which report element can be affected?
- A. Report settings
- B. Output profiles
- C. Custom datasets
- D. Report scheduling
Answer: C
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/upgrade-guide/669300/checking-reports
NEW QUESTION 39
On FortiAnalyzer, what is a wildcard administrator account?
- A. An account that requires two-factor authentication
- B. An account that allows guest access with read-only privileges
- C. An account that validates against any user account on a FortiAuthenticator
- D. An account that permits access to members of an LDAP group
Answer: D
Explanation:
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/747268/configuring-wildcard-admin-accounts
NEW QUESTION 40
Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)
- A. License type
- B. Disk size
- C. RAID level
- D. Total quota
Answer: C,D
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/368682/disk-space-allocation
NEW QUESTION 41
FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.
What is the most likely problem?
- A. Logs are rolling before the report is run
- B. Quota enforcement is acting on analytical data before a report is complete
- C. CPU resources are too high
- D. Disk utilization for archive logs is set for 15 days
Answer: A
NEW QUESTION 42
An administrator has configured the following settings:
config system global
set log-checksum md5-auth
end
What is the significance of executing this command?
- A. This command records the log file MD5 hash value.
- B. This command encrypts log transfer between FortiAnalyzer and other devices.
- C. This command records the log file MD5 hash value and authentication code.
- D. This command records passwords in log files and encrypts them.
Answer: C
NEW QUESTION 43
What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)
- A. Both secure communications methods (SSL and IPsec) allow the store and upload option.
- B. All FortiGates can send logs to FortiAnalyzer using the store and upload option.
- C. Disk logging is enabled by default on the FortiGate.
- D. Disk logging is enabled on the FortiGate through the CLI only.
- E. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.
Answer: A,D,E
NEW QUESTION 44
What is the recommended method of expanding disk space on a FortiAnalyzer VM?
- A. From the VM host manager, add an additional virtual disk and rebuild your RAID array
- B. From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage
- C. From the VM host manager, expand the size of the existing virtual disk
- D. From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk
Answer: B
Explanation:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD40848
NEW QUESTION 45
What is the purpose of a predefined template on the FortiAnalyzer?
- A. It can be edited and modified as required
- B. It contains predefined data to generate mock reports
- C. It specifies the report layout which contains predefined texts, charts, and macros
- D. It specifies report settings which contains time period, device selection, and schedule
Answer: C
Explanation:
Reference:
2300_Reports/0010_Predefined_reports.htm#:~:text=FortiAnalyzer%20includes%20a%20number%
20of,create%20and%2For%20build%20reports.&text=A%20template%20populates%20the%20Layout,that%
20is%20to%20be%20created.
https://help.fortinet.com/fa/faz50hlp/56/5-6-2/FMG-FAZ/2300_Reports/0010_Predefined_reports.htm
NEW QUESTION 46
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A. A trusted host profile that restricts access to the LDAP group
- B. A local wildcard administrator account
- C. An administrator group
- D. A remote LDAP server
Answer: B,D
NEW QUESTION 47
Refer to the exhibit.
Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)
- A. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.
- B. Reports will be cached in the memory.
- C. Report size will be optimized to conserve disk space on FortiAnalyzer.
- D. This feature is automatically enabled for scheduled reports.
Answer: A,C
NEW QUESTION 48
You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.
What does the disk quota refer to?
- A. The maximum disk utilization for the FortiAnalyzer model
- B. The maximum disk utilization for the ADOM type
- C. The maximum disk utilization for all devices in the ADOM
- D. The maximum disk utilization for each device in the ADOM
Answer: C
NEW QUESTION 49
An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email.
What could be the problem?
- A. ADOM mode is configured with Advanced mode.
- B. Fortinet is assigned the Standard_ User administrator profile.
- C. A trusted host is configured.
- D. Fortinet is assigned the Restricted_ User administrator profile.
Answer: B
NEW QUESTION 50
Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?
- A. To resolve host names
- B. To use real-time forwarding
- C. To improve DNS response times
- D. To properly correlate logs
Answer: D
Explanation:
NEW QUESTION 51
What are two of the key features of FortiAnalyzer? (Choose two.)
- A. Virtual domains (VDOMs)
- B. Reports
- C. Cloud-based management
- D. Centralized log repository
Answer: B,D
NEW QUESTION 52
What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?
(Choose two.)
- A. Mail server
- B. SFTP, FTP, or SCP server
- C. Output profile
- D. Report scheduling
Answer: A,C
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.0.2/administration-guide/598322/creating-output-profiles
NEW QUESTION 53
......
How to register for the Fortinet NSE5_FAZ-6.4 Exam?
Registering for the Fortinet NSE5_FAZ-6.4 exam is easier than you might think. It is not necessary to have any previous experience in the industry of Computer Networking or Security to be able to register for this exam.
- After this, all you have left to do is sit back and await your notification from the Prometric center regarding the next steps on how to prepare for the actual exam
- First of all visit Fortinet
- You will also receive an invitation letter from Fortinet to attend the next available training session in order to prepare for your certification examination.
- Once your application has been accepted, you will receive confirmation from the Prometric center stating that your payment has been processed and accepted.
Learn the right study material to learn faster and retain more information longer
The best study material is the one that is specific to your learning goal. If you're trying to learn more about blockchain, look for a course or reading material that focuses on what you need to learn. Don't compromise on quality. The best quality materials are not always free, but they're worth the investment if they save you time, frustration, and help you learn faster.
When you are studying a topic, the kind of material you use can determine how well you grasp the information. It's not enough to just access different materials, but getting the right study material that is ideal for your learning style. FortiNet NSE5_FAZ-6.4 Dumps is one such trusted source and has been developed to help individuals prepare for the Fortinet NSE 5 FortiAnalyzer 6.4 certification exam.
The quality of the study material can determine how fast you learn, whether you will retain the information longer or not.
Real exam questions are provided for NSE 5 Network Security Analyst tests, which can make sure you 100% pass: https://www.fast2test.com/NSE5_FAZ-6.4-premium-file.html