Latest NSE5_FAZ-7.0 Dumps – Valid Learning Guide For Fortinet NSE 5 – FortiAnalyzer 7.0 Exam

1. Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

2. The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device.

What can be the reason for this failure?

3. Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

4. Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

5. If you upgrade the FortiAnalyzer firmware, which report element can be affected?

6. If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

7. What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

8. Which two statements express the advantages of grouping similar reports? (Choose two.)

9. What purposes does the auto-cache setting on reports serve? (Choose two.)

10. What are two of the key features of FortiAnalyzer? (Choose two.)

11. What is the purpose of employing RAID with FortiAnalyzer?

12. An administrator has moved FortiGate A from the root ADOM to ADOM 1. However, the administrator is not able to generate reports for FortiGate A in ADOM 1.

What should the administrator do to solve this issue?

13. If the primary FortiAnalyzer in an HA cluster fails, how is the new primary elected?

14. Which statements are correct regarding FortiAnalyzer reports? (Choose two)

15. Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

16. Refer to the exhibits.

How many events will be added to the incident created after running this playbook?

17. Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

18. Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

19. Which daemon is responsible for enforcing raw log file size?

20. Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.

What is the most likely problem?

21. Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

22. After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

execute sql-local rebuild-adom <new-ADOM-name>

23. In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

24. What can you do on FortiAnalyzer to restrict administrative access from specific locations?

25. What does the disk status Degraded mean for RAID management?

26. What can the CLI command # diagnose test application oftpd 3 help you to determine?

27. For which two purposes would you use the command set log checksum? (Choose two.)

28. An administrator has configured the following settings:

config system fortiview settings

set resolve-ip enable

end

What is the significance of executing this command?

29. You’ve moved a registered logging device out of one ADOM and into a new ADOM .

What happens when you rebuild the new ADOM database?

30. An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email.

What could be the problem?

31. In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname .

How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

32. What is the recommended method of expanding disk space on a FortiAnalyzer VM?

33. Refer to the exhibit.

Which image corresponds to the packet capture shown in the exhibit?

A)

B)

C)

D)

34. Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?