Fortinet NSE5_FAZ-7.2 Exam Practice Test Instant Access

Question 1

Refer to the exhibit.

What does the data point at 12:20 indicate?

AThe performance of FortiAnalyzer is below the baseline.

BFortiAnalyzer is using its cache to avoid dropping logs.

CThe log insert lag time is increasing.

DThe sqlplugind service is caught up with new logs.

Answer : C

Question 2

What are two benefits of using fabric connectors? (Choose two.)

AThey allow FortiAnalyzer to send logs in real-time to public cloud accounts.

BYou do not need an additional license to send logs to the cloud platform.

CFabric connectors allow you to improve redundancy.

DUsing fabric connectors is more efficient than using third-party polling with API.

Answer : A, C

Question 3

Why run the command diagnose sql status sqlplugind?

ATo list the current SQL processes running

BTo check what is the database log insertion status

CTo display the SOL query connections and hcache status

DTo view the current hcache size

Answer : C

Question 4

Which statement about the FortiSOAR management extension is correct?

AIt requires a FortiManager configured to manage FortiGate

BIt requires a dedicated FortiSOAR device or VM.

CIt does not include a limited trial by default.

DIt runs as a docker container on FortiAnalyzer

Answer : D

Question 5

Which item must you configure on FortiAnalyzer to email generated reports automatically?

AOutput profile

BReport scheduling

CSFTP server

DSNMP server

Answer : A

Question 6

Refer to the exhibits.

How many events will be added to the incident created after running this playbook?

ATen events will be added.

BNo events will be added.

CFive events will be added.

DThirteen events will be added.

Answer : A

Question 7

Which SQL query is in the correct order to query the database in the FortiAnslyzer?

ASELECT devid FROM Slog GROOP BY devid WHERE * user' =* USERl'

BSELECT devid WHERE 'u3er'='USERl' FROM $ log GROUP BY devid

CSELECT devid FROM Slog- WHERE *user' =' USERl' GROUP BY devid

DFROM Slog WHERE 'user* =' USERl' SELECT devid GROUP BY devid

Answer : C

FortiAnalyzer_7.0_Study_Guide-Online.pdf page 259: The main clauses FortiAnalyzer reports use are as follows:

*FROM

*WHERE

*GROUP BY

*ORDER BY

* LIMIT

* OFFSET

Accordingly, following the SELECT keyword, the statement must be followed by one or more clauses in the order in which they appear in the table shown on this slide.

Fortinet NSE5_FAZ-7.2 Fortinet NSE 5 - FortiAnalyzer 7.2 Exam Practice Test