Fortinet NSE5_FAZ-7.2 Exam Questions Instant Access

Question 1

When you perform a system backup, what does the backup configuration contain? (Choose two.)

AGenerated reports

BDevice list

CAuthorized devices logs

DSystem information

Answer : B, D

https://help.fortinet.com/fa/cli-olh/5-6-5/Content/Document/1400_execute/backup.htm

Question 2

What are two advantages of setting up fabric ADOM? (Choose two.)

AIt can be used for fast data processing and log correlation

BIt can be used to facilitate communication between devices in same Security Fabric

CIt can include all Fortinet devices that are part of the same Security Fabric

DIt can include only FortiGate devices that are part of the same Security Fabric

Answer : A, C

https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/448471/creating-a-security-fabric-adom

Question 3

Which statement is true regarding Macros on FortiAnalyzer?

AMacros are ADOM specific and each ADOM will have unique macros relevant to that ADOM.

BMacros are supported only on the FortiGate ADOM.

CMacros are useful in generating excel log files automatically based on the reports settings.

DMacros are predefined templates for reports and cannot be customized.

Answer : A

FortiAnalyzer_7.0_Study_Guide-Online.pdf page 283: Note that macros are ADOM-specific and supported in FortiGate and FortiCarrier ADOMs only.

Question 4

Refer to the exhibit.

Which statement is correct regarding the event displayed?

AThe security risk was blocked or dropped.

BThe security event risk is considered open.

CAn incident was created from this event.

DThe risk source is isolated.

Answer : A

Events in FortiAnalyzer will be in one of four statuses. The current status will determine if more actions need to be taken by the security team or not.

The possible statuses are:

Unhandled: The security event risk is not mitigated or contained, so it is considered open.

Contained: The risk source is isolated.

Mitigated: The security risk is mitigated by being blocked or dropped.

(Blank): Other scenarios.

FortiAnalyzer_7.0_Study_Guide-Online pag. 206

Question 5

Refer to the exhibit.

What does the data point at 14:55 tell you?

AThe received rate is almost at its maximum for this device

BThe sqlplugind daemon is behind in log indexing by two logs

CLogs are being dropped

DRaw logs are reaching FortiAnalyzer faster than they can be indexed

Answer : D

Question 6

You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

AFortiAnalyzer resets the disk quota of the new ADOM to default.

BFortiAnalyzer migrates archive logs to the new ADOM.

CFortiAnalyzer migrates analytics logs to the new ADOM.

DFortiAnalyzer removes logs from the old ADOM.

Answer : C

https://kb.fortinet.com/kb/documentLink.do?externalID=FD40383

Question 7

An administrator has configured the following settings:

config system fortiview settings

set resolve-ip enable

end

What is the significance of executing this command?

AUse this command only if the source IP addresses are not resolved on FortiGate.

BIt resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.

CYou must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.

DIt resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

Answer : D

Fortinet NSE 5 - FortiAnalyzer 7.2 NSE5_FAZ-7.2 Exam Questions