NSE5_FAZ-7.2 Dumps - Fortinet NSE 5 - FortiAnalyzer 7.2 Analyst Exam - Free Latest Dumps for IT Certification Exams

NSE5_FAZ-7.2 Dumps – Fortinet NSE 5 – FortiAnalyzer 7.2 Analyst Exam

dumps2023-09-18T08:42:04+08:00

NSE5_FAZ-7.2 exam is a new one for Fortinet NSE 5 Certification, and the former code NSE5_FAZ-7.0 exam will retire at the end of August. The new NSE5_FAZ-7.2 exam has fewer questions than the old one. The real NSE5_FAZ-7.2 Fortinet NSE 5 – FortiAnalyzer 7.2 Analyst exam has only 30 questions, and you have 60 minutes to answer all the questions. The available languages are English and Japanese. We have cracked the latest NSE5_FAZ-7.2 exam dumps, which are valuable for you to pass. Free Fortinet NSE5_FAZ-7.2 exam dumps are below.

Page 1 of 5

1. Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

Virtual domains

Administrative access profiles

Trusted hosts

Security Fabric

2. Which daemon is responsible for enforcing raw log file size?

logfiled

oftpd

sqlplugind

miglogd

3. An administrator has configured the following settings:

config system global

set log-checksum md5-auth

end

What is the significance of executing this command?

This command records the log file MD5 hash value.

This command records passwords in log files and encrypts them.

This command encrypts log transfer between FortiAnalyzer and other devices.

This command records the log file MD5 hash value and authentication code.

4. Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)

Mail server

Output profile

SFTP server

Report scheduling

5. For which two purposes would you use the command set log checksum? (Choose two.)

To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server

To prevent log modification or tampering

To encrypt log communications

To send an identical set of logs to a second logging server

6. Refer to the exhibit.

What does the data point at 14:55 tell you?

The received rate is almost at its maximum for this device

The sqlplugind daemon is behind in log indexing by two logs

Logs are being dropped

Raw logs are reaching FortiAnalyzer faster than they can be indexed

7. You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.

What is the recommended method to replace the disk?

Shut down FortiAnalyzer and then replace the disk

Downgrade your RAID level, replace the disk, and then upgrade your RAID level

Clear all RAID alarms and replace the disk while FortiAnalyzer is still running

Perform a hot swap

8. On the RAID management page, the disk status is listed as Initializing.

What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

FortiAnalyzer is ensuring that the parity data of a redundant drive is valid

FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state

FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant

FortiAnalyzer is functioning normally

9. In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve

Configure # set resolve-ip enable in the system FortiView settings

Configure local DNS servers on FortiAnalyzer

Resolve IP addresses on FortiGate

10. You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.

What does the disk quota refer to?

The maximum disk utilization for each device in the ADOM

The maximum disk utilization for the FortiAnalyzer model

The maximum disk utilization for the ADOM type

The maximum disk utilization for all devices in the ADOM

Page 2 of 5

11. Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

To properly correlate logs

To use real-time forwarding

To resolve host names

To improve DNS response times

12. You need to upgrade your FortiAnalyzer firmware.

What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

FortiAnalyzer uses log fetching to retrieve the logs when back online

FortiGate uses the miglogd process to cache the logs

The logfiled process stores logs in offline mode

Logs are dropped

13. After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

execute sql-local rebuild-adom <new-ADOM-name>

To reset the disk quota enforcement to default

To remove the analytics logs of the device from the old database

To migrate the archive logs to the new ADOM

To populate the new ADOM with analytical logs for the moved device, so you can run reports

14. If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Hot swap the disk

Replace the disk and rebuild the RAID manually

Take no action if the RAID level supports a failed disk

Shut down FortiAnalyzer and replace the disk

15. If you upgrade the FortiAnalyzer firmware, which report element can be affected?

Custom datasets

Report scheduling

Report settings

Output profiles

16. FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.

What is the most likely problem?

Quota enforcement is acting on analytical data before a report is complete

Logs are rolling before the report is run

CPU resources are too high

Disk utilization for archive logs is set for 15 days

17. Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Antivirus logs

Web filter logs

IPS logs

Application control logs

18. Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

A local wildcard administrator account

A remote LDAP server

A trusted host profile that restricts access to the LDAP group

An administrator group

19. When you perform a system backup, what does the backup configuration contain? (Choose two.)

Generated reports

Device list

Authorized devices logs

System information

20. Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

FROM

LIMIT

WHERE

ORDER BY

Page 3 of 5

21. What is the purpose of a dataset query in FortiAnalyzer?

It sorts log data into tables

It extracts the database schema

It retrieves log data from the database

It injects log data into the database

22. Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.

What is the most likely problem?

CPU resources are too high

Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

The total disk space is insufficient and you need to add other disk

The ADOM disk quota is set too low, based on log rates

23. Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

License type

Disk size

Total quota

RAID level

24. View the exhibit:

What does the 1000MB maximum for disk utilization refer to?

The disk quota for the FortiAnalyzer model

The disk quota for all devices in the ADOM

The disk quota for each device in the ADOM

The disk quota for the ADOM type

25. You’ve moved a registered logging device out of one ADOM and into a new ADOM.

What happens when you rebuild the new ADOM database?

FortiAnalyzer resets the disk quota of the new ADOM to default.

FortiAnalyzer migrates archive logs to the new ADO

FortiAnalyzer migrates analytics logs to the new ADO

FortiAnalyzer removes logs from the old ADO

26. What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log

settings?

The log file is stored as a raw log and is available for analytic support.

The log file rolls over and is archived.

The log file is purged from the database.

The log file is overwritten.

27. What is the purpose of employing RAID with FortiAnalyzer?

To introduce redundancy to your log data

To provide data separation between ADOMs

To separate analytical and archive data

To back up your logs

28. Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

Log upload

Indicators of Compromise

Log forwarding an aggregation mode

Log fetching

29. What is the recommended method of expanding disk space on a FortiAnalyzer VM?

From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage

From the VM host manager, expand the size of the existing virtual disk

From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk

From the VM host manager, add an additional virtual disk and rebuild your RAID array

30. How are logs forwarded when FortiAnalyzer is using aggregation mode?

Logs are forwarded as they are received and content files are uploaded at a scheduled time.

Logs and content files are stored and uploaded at a scheduled time.

Logs are forwarded as they are received.

Logs and content files are forwarded as they are received.

Page 4 of 5

31. How do you restrict an administrator’s access to a subset of your organization’s ADOMs?

Set the ADOM mode to Advanced

Assign the ADOMs to the administrator’s account

Configure trusted hosts

Assign the default Super_User administrator profile

32. In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

Remote logging must be enabled on FortiGate

Log encryption must be enabled

ADOMs must be enabled

FortiGate must be registered with FortiAnalyzer

33. What can the CLI command # diagnose test application oftpd 3 help you to determine?

What devices and IP addresses are connecting to FortiAnalyzer

What logs, if any, are reaching FortiAnalyzer

What ADOMs are enabled and configured

What devices are registered and unregistered

34. What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

Chart Builder

Export to Report Chart

Dataset Library

Custom View

35. In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

Configure local DNS servers on FortiAnalyzer

Resolve IPs on FortiGate

Configure # set resolve-ip enable in the system FortiView settings

Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

36. What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

SFTP, FTP, or SCP server

Mail server

Output profile

Report scheduling

37. View the exhibit.

Why is the total quota less than the total system storage?

3.6% of the system storage is already being used.

Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files

The oftpd process has not archived the logs yet

The logfiled process is just estimating the total quota

38. What purposes does the auto-cache setting on reports serve? (Choose two.)

To reduce report generation time

To automatically update the hcache when new logs arrive

To reduce the log insert lag rate

To provide diagnostics on report generation time

39. If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

Output profiles

Report settings

Report scheduling

Custom datasets

40. How does FortiAnalyzer retrieve specific log data from the database?

SQL FROM statement

SQL GET statement

SQL SELECT statement

SQL EXTRACT statement

Page 5 of 5

41. On FortiAnalyzer, what is a wildcard administrator account?

An account that permits access to members of an LDAP group

An account that allows guest access with read-only privileges

An account that requires two-factor authentication

An account that validates against any user account on a FortiAuthenticator

42. For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

Use DNS

Use host name resolution

Use real-time forwarding

Use an NTP server

43. What FortiGate process caches logs when FortiAnalyzer is not reachable?

logfiled

sqlplugind

oftpd

miglogd

44. FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

To upload logs to an SFTP server

To prevent log modification during backup

To send an identical set of logs to a second logging server

To encrypt log communication between devices

45. How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

Use static routes

Use administrative profiles

Use trusted hosts

Use secure protocols

NSE5_FAZ-7.2 Dumps – Fortinet NSE 5 – FortiAnalyzer 7.2 Analyst Exam

NSE5_FAZ-7.2 Dumps – Fortinet NSE 5 – FortiAnalyzer 7.2 Analyst Exam

Share this post

Leave a Reply Cancel reply

Related Posts