View All NSE5_FAZ-6.4 Actual Exam Questions Answers and Explanations for Free May-2022 [Q38-Q61]

Rate this post

View All NSE5_FAZ-6.4 Actual Exam Questions Answers and Explanations for Free May-2022

The Most In-Demand Fortinet NSE5_FAZ-6.4 Pass Guaranteed Quiz

Fortinet NSE5_FAZ-6.4 Exam Syllabus Topics:

Topic	Details
Topic 1	Configure administrative domains (ADOMs) Perform initial configuration
Topic 2	Configure event handlers System configuration
Topic 3	Troubleshoot device communication issues Device registration and communication
Topic 4	Troubleshoot reports Troubleshoot RAID Protect log data Logs and reports
Topic 5	Troubleshoot and manage logs Register devices in ADOMs

QUESTION 38
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

Must configure the FortiAnalyzer end of the tunnel only–the FortiGate end is auto-negotiated.

Must establish an IPsec tunnel ID and pre-shared key.

IPsec cannot be enabled if SSL is enabled as well.

IPsec is only enabled through the CLI on FortiAnalyzer.

QUESTION 39
What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

Log correlation

Host name resolution

Log collection

Real-time forwarding

QUESTION 40
What statements are true regarding FortiAnalyzer ‘s treatment of high availability (HA) dusters? (Choose two)

FortiAnalyzer distinguishes different devices by their serial number.

FortiAnalyzer receives logs from d devices in a duster.

FortiAnalyzer receives bgs only from the primary device in the cluster.

FortiAnalyzer only needs to know (he serial number of the primary device in the cluster-it automaticaly discovers the other devices.

QUESTION 41
What is the purpose of a predefined template on the FortiAnalyzer?

It can be edited and modified as required

It specifies the report layout which contains predefined texts, charts, and macros

It specifies report settings which contains time period, device selection, and schedule

It contains predefined data to generate mock reports

QUESTION 42
Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

Report size will be optimized to conserve disk space on FortiAnalyzer.

Reports will be cached in the memory.

This feature is automatically enabled for scheduled reports.

Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.

QUESTION 43
What statements are true regarding disk log quota? (Choose two)

The FortiAnalyzer stops logging once the disk log quota is met.

The FortiAnalyzer automatically sets the disk log quota based on the device.

The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.

The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.

QUESTION 44
Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.
What is the most likely problem?

CPU resources are too high

Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

The total disk space is insufficient and you need to add other disk

The ADOM disk quota is set too low, based on log rates

QUESTION 45
What is the purpose of the following CLI command?

To add a log file checksum

To add the MD’s hash value and authentication code

To add a unique tag to each log to prove that it came from this FortiAnalyzer

To encrypt log communications

QUESTION 46
View the exhibit:

What does the 1000MB maximum for disk utilization refer to?

The disk quota for the FortiAnalyzer model

The disk quota for all devices in the ADOM

The disk quota for each device in the ADOM

The disk quota for the ADOM type

QUESTION 47
By default, what happens when a log file reaches its maximum file size?

FortiAnalyzer overwrites the log files.

FortiAnalyzer stops logging.

FortiAnalyzer rolls the active log by renaming the file.

FortiAnalyzer forwards logs to syslog.

QUESTION 48
In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.
How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve

Configure # set resolve-ip enable in the system FortiView settings

Configure local DNS servers on FortiAnalyzer

Resolve IP addresses on FortiGate

QUESTION 49
On the RAID management page, the disk status is listed as Initializing.
What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

FortiAnalyzer is ensuring that the parity data of a redundant drive is valid

FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state

FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant

FortiAnalyzer is functioning normally

QUESTION 50
Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end.

Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version.

Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.

Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device.

QUESTION 51
What are two of the key features of FortiAnalyzer? (Choose two.)

Centralized log repository

Cloud-based management

Reports

Virtual domains (VDOMs)

QUESTION 52
Which two statements about log forwarding are true? (Choose two.)

Forwarded logs cannot be filtered to match specific criteria.

Logs are forwarded in real-time only.

The client retains a local copy of the logs after forwarding.

You can use aggregation mode only with another FortiAnalyzer.

QUESTION 53
An administrator has configured the following settings:
config system fortiview settings
set resolve-ip enable
end
What is the significance of executing this command?

Use this command only if the source IP addresses are not resolved on FortiGate.

It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.

You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.

It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

QUESTION 54
Which daemon is responsible for enforcing raw log file size?

logfiled

oftpd

sqlplugind

miglogd

QUESTION 55
How are logs forwarded when FortiAnalyzer is using aggregation mode?

Logs are forwarded as they are received and content files are uploaded at a scheduled time.

Logs and content files are stored and uploaded at a scheduled time.

Logs are forwarded as they are received.

Logs and content files are forwarded as they are received.

QUESTION 56
View the exhibit.

What does the data point at 14:35 tell you?

FortiAnalyzer is dropping logs.

FortiAnalyzer is indexing logs faster than logs are being received.

FortiAnalyzer has temporarily stopped receiving logs so older logs’ can be indexed.

The sqlplugind daemon is ahead in indexing by one log.

QUESTION 57
Refer to the exhibit.

What does the data point at 14:55 tell you?

The received rate is almost at its maximum for this device

The sqlplugind daemon is behind in log indexing by two logs

Logs are being dropped

Raw logs are reaching FortiAnalyzer faster than they can be indexed

QUESTION 58
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

A local wildcard administrator account

A remote LDAP server

A trusted host profile that restricts access to the LDAP group

An administrator group

QUESTION 59
When you perform a system backup, what does the backup configuration contain? (Choose two.)

Generated reports

Device list

Authorized devices logs

System information

QUESTION 60
What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

Log correlation

Host name resolution

Log collection

Real-time forwarding

QUESTION 61
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

SSL is the default setting.

SSL communications are auto-negotiated between the two devices.

SSL can send logs in real-time only.

SSL encryption levels are globally set on FortiAnalyzer.

FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.

NSE5_FAZ-6.4 Free Certification Exam Material with 95 Q&As : https://www.actualcollection.com/NSE5_FAZ-6.4-exam-questions.html

Fortinet NSE5_FAZ-6.4 Exam Syllabus Topics:

Leave a comment Cancel reply