Fortinet NSE5_FAZ-7.2 Exam Practice Test Instant Access

Question 1

What happens when the IOC breach detection engine on FortiAnalyzer finds web logs that match a blocklisted IP address?

AThe endpoint is marked as Compromised and. optionally, can be put in quarantine.

BFortiAnalyzer flags the associated host for further analysis.

CA new Infected entry is added for the corresponding endpoint.

DThe detection engine classifies those logs as Suspicious

Answer : A

Question 2

Why run the command diagnose sql status sqlplugind?

ATo list the current SQL processes running

BTo check what is the database log insertion status

CTo display the SOL query connections and hcache status

DTo view the current hcache size

Answer : C

Question 3

Which statement about the FortiSOAR management extension is correct?

AIt requires a FortiManager configured to manage FortiGate

BIt requires a dedicated FortiSOAR device or VM.

CIt does not include a limited trial by default.

DIt runs as a docker container on FortiAnalyzer

Answer : D

Question 4

Which item must you configure on FortiAnalyzer to email generated reports automatically?

AOutput profile

BReport scheduling

CSFTP server

DSNMP server

Answer : A

Question 5

Which statement describes online logs on FortiAnalyzer?

ALogs that reached a specific size and were rolled over

BLogs that can be used to create reports

CLogs that can be viewed using Log Browse

DLogs that are saved to disk, compressed, and available in FortiView

Answer : C

Question 6

Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

AFortiAnalyzer HA can function without VRRP. and VRRP is required only if you have more than two FortiAnalyzer devices in a cluster.

BFortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.

CAll devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.

DFortiAnalyzer HA implementation is supported by many public cloud infrastructures such as AWS, Microsoft Azure, and Google Cloud.

Answer : B, C

FortiAnalyzer HA implementation works only in networks where Virtual Router Redundancy Protocol (VRRP) is permitted. Therefore it may not be supported by some public cloud infrastructures.

Question 7

Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

AReport size will be optimized to conserve disk space on FortiAnalyzer.

BReports will be cached in the memory.

CThis feature is automatically enabled for scheduled reports.

DEnabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.

Answer : C, D

'Enable auto-cache in the report settings to boost the reporting performance and reduce report generation time. Scheduled reports have auto-cache enabled already.'

FortiAnalyzer_7.0_Study_Guide-Online page 306

Fortinet NSE5_FAZ-7.2 Fortinet NSE 5 - FortiAnalyzer 7.2 Exam Practice Test