Fortinet NSE5_FAZ-7.2 Exam Questions Instant Access

Question 1

Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

ATo properly correlate logs

BTo use real-time forwarding

CTo resolve host names

DTo improve DNS response times

Answer : A

Question 2

What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

AChart Builder

BExport to Report Chart

CDataset Library

DCustom View

Answer : B

Question 3

Refer to the exhibit.

Which statement is correct regarding the event displayed?

AThe security risk was blocked or dropped.

BThe security event risk is considered open.

CAn incident was created from this event.

DThe risk source is isolated.

Answer : A

Events in FortiAnalyzer will be in one of four statuses. The current status will determine if more actions need to be taken by the security team or not.

The possible statuses are:

Unhandled: The security event risk is not mitigated or contained, so it is considered open.

Contained: The risk source is isolated.

Mitigated: The security risk is mitigated by being blocked or dropped.

(Blank): Other scenarios.

FortiAnalyzer_7.0_Study_Guide-Online pag. 206

Question 4

What is the purpose of the following CLI command?

ATo add a log file checksum

BTo add the MD's hash value and authentication code

CTo add a unique tag to each log to prove that it came from this FortiAnalyzer

DTo encrypt log communications

Answer : A

https://docs2.fortinet.com/document/fortianalyzer/6.0.3/cli-reference/849211/global

Question 5

FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?

ATo upload logs to an SFTP server

BTo prevent log modification during backup

CTo send an identical set of logs to a second logging server

DTo encrypt log communication between devices

Answer : D

Question 6

How do you restrict an administrator's access to a subset of your organization's ADOMs?

ASet the ADOM mode to Advanced

BAssign the ADOMs to the administrator's account

CConfigure trusted hosts

DAssign the default Super_User administrator profile

Answer : B

https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/717578/assigning-administrators-to-an-adom

Question 7

FortiAnalyzer centralizes which functions? (Choose three)

ANetwork analysis

BGraphical reporting

CContent archiving / data mining

DVulnerability assessment

ESecurity log analysis / forensics

Answer : B, C, E

Fortinet NSE 5 - FortiAnalyzer 7.2 NSE5_FAZ-7.2 Exam Questions