Fortinet NSE5_FAZ-7.2 Exam Questions Instant Access

Question 1

Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

AFROM

BLIMIT

CWHERE

DORDER BY

Answer : A

Question 2

Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

AWhen in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.

BCollector mode is the default operating mode.

CWhen in collector mode. FortiAnalyzer supports event management and reporting features.

DBy deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting

Answer : A, D

https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/312644/analyzer-collector-collaboration

Question 3

You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on

FortiAnalyzer has failed.

What is the recommended method to replace the disk?

AShut down FortiAnalyzer and then replace the disk

BDowngrade your RAID level, replace the disk, and then upgrade your RAID level

CClear all RAID alarms and replace the disk while FortiAnalyzer is still running

DPerform a hot swap

Answer : A

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-swap-Hard-Disk-on-FortiAnalyzer/ta-p/194997?externalID=FD41397#:~:text=If%20a%20hard%20disk%20on,process%20known%20as%20hot%20swapping

Question 4

Which two statements are true regarding ADOM modes? (Choose two.)

AYou can only change ADOM modes through CLI.

BIn normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADOM.

CIn an advanced mode ADOM. you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.

DNormal mode is the default ADOM mode.

Answer : C, D

Question 5

In FortiAnalyzer's FormView, source and destination IP addresses from FortiGate devices are not resolving to

a hostname. How can you resolve the source and destination IPs, without introducing any additional

performance impact to FortiAnalyzer?

AConfigure local DNS servers on FortiAnalyzer

BResolve IPs on FortiGate

CConfigure # set resolve-ip enable in the system FortiView settings

DResolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

Answer : B

Question 6

What is the purpose of employing RAID with FortiAnalyzer?

ATo introduce redundancy to your log data

BTo provide data separation between ADOMs

CTo separate analytical and archive data

DTo back up your logs

Answer : A

https://en.wikipedia.org/wiki/RAID#:~:text=RAID%20(%22Redundant%20Array%20of%20Inexpensive,%2C%20performance%20improvement%2C%20or%20both.

Question 7

On the RAID management page, the disk status is listed as Initializing.

What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

AFortiAnalyzer is ensuring that the parity data of a redundant drive is valid

BFortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state

CFortiAnalyzer is writing to all of its hard drives to make the array fault tolerant

DFortiAnalyzer is functioning normally

Answer : C

8977-00505692583a/FortiAnalyzer-5.6.10-Administration-Guide.pdf (40)

Fortinet NSE 5 - FortiAnalyzer 7.2 NSE5_FAZ-7.2 Exam Questions