[2021] NSE5_FAZ-6.2 All-in-One Exam Guide Practice To your NSE5_FAZ-6.2 Exam!
Preparations of NSE5_FAZ-6.2 Exam 2021 Network Security Analyst Unlimited 65 Questions
NEW QUESTION 29
Refer to the exhibit.
What does the data point at 14:55 tell you?
- A. Logs are being dropped
- B. The sqlplugind daemon is behind in log indexing by two logs
- C. Raw logs are reaching FortiAnalyzer faster than they can be indexed
- D. The received rate is almost at its maximum for this device
Answer: A
NEW QUESTION 30
What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?
(Choose two.)
- A. SFTP, FTP, or SCP server
- B. Mail server
- C. Report scheduling
- D. Output profile
Answer: A,D
NEW QUESTION 31
How does FortiAnalyzer retrieve specific log data from the database?
- A. SQL EXTRACT statement
- B. SQL GET statement
- C. SQL SELECT statement
- D. SQL FROM statement
Answer: C
NEW QUESTION 32
View the exhibit.
Why is the total quota less than the total system storage?
- A. The oftpd process has not archived the logs yet
- B. The logfiled process is just estimating the total quota
- C. Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files
- D. 3.6% of the system storage is already being used.
Answer: C
NEW QUESTION 33
What is the purpose of the following CLI command?
- A. To encrypt log communications
- B. To add a log file checksum
- C. To add a unique tag to each log to prove that it came from this FortiAnalyzer
- D. To add the MD's hash value and authentication code
Answer: B
NEW QUESTION 34
How are logs forwarded when FortiAnalyzer is configured to use aggregation mode?
- A. Logs and content files are stored and uploaded at a scheduled time.
- B. Logs are forwarded as they are received.
- C. Logs are forwarded as they are received and content files are uploaded at a scheduled time.
- D. Logs and content files are forwarded as they are received.
Answer: D
NEW QUESTION 35
View the exhibit.
Why is the total quota less than the total system storage?
- A. The oftpd process has not archived the logs yet
- B. The logfiled process is just estimating the total quota
- C. Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files
- D. 3.6% of the system storage is already being used.
Answer: C
NEW QUESTION 36
What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)
- A. TACACS+
- B. Local
- C. PKI
- D. LDAP
- E. RADIUS
Answer: A,D,E
NEW QUESTION 37
You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?
- A. FortiAnalyzer migrates analytics logs to the new ADOM.
- B. FortiAnalyzer migrates archive logs to the new ADOM.
- C. FortiAnalyzer removes logs from the old ADOM.
- D. FortiAnalyzer resets the disk quota of the new ADOM to default.
Answer: A
NEW QUESTION 38
What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?
- A. Log correlation
- B. Host name resolution
- C. Real-time forwarding
- D. Log collection
Answer: C
NEW QUESTION 39
Refer to the exhibit.
What does the data point at 14:55 tell you?
- A. Logs are being dropped
- B. The sqlplugind daemon is behind in log indexing by two logs
- C. Raw logs are reaching FortiAnalyzer faster than they can be indexed
- D. The received rate is almost at its maximum for this device
Answer: A
NEW QUESTION 40
You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?
- A. FortiAnalyzer uses log fetching to retrieve the logs when back online
- B. FortiGate uses the miglogd process to cache the logs
- C. Logs are dropped
- D. The logfiled process stores logs in offline mode
Answer: B
NEW QUESTION 41
FortiAnalyzer centralizes which functions? (Choose three)
- A. Security log analysis / forensics
- B. Graphical reporting
- C. Content archiving / data mining
- D. Vulnerability assessment
- E. Network analysis
Answer: A,B,C
NEW QUESTION 42
If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?
- A. Hot swap the disk
- B. Shut down FortiAnalyzer and replace the disk
- C. Replace the disk and rebuild the RAID manually
- D. Take no action if the RAID level supports a failed disk
Answer: C
Explanation:
Explanation/Reference: https://www.fortinetguru.com/2020/06/raid-management-fortianalyzer-fortios-6-2-3-2/
NEW QUESTION 43
In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)
- A. ADOMs must be enabled
- B. Remote logging must be enabled on FortiGate
- C. Log encryption must be enabled
- D. FortiGate must be registered with FortiAnalyzer
Answer: B,D
NEW QUESTION 44
Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?
- A. To use real-time forwarding
- B. To properly correlate logs
- C. To resolve host names
- D. To improve DNS response times
Answer: B
NEW QUESTION 45
View the exhibit.
What does the data point at 14:35 tell you?
- A. The sqlplugind daemon is ahead in indexing by one log.
- B. FortiAnalyzer is dropping logs.
- C. FortiAnalyzer is indexing logs faster than logs are being received.
- D. FortiAnalyzer has temporarily stopped receiving logs so older logs' can be indexed.
Answer: A
Explanation:
Explanation
Logs are received then they are indexed, no logging server in the world can index logs faster than they are received. When FAZ receives raw logs, they are inserted (indexed) by the SQL database and the sqlplugind daemon, this graph shows that FAZ received 3 logs and sqlplugind indexed 4.
NEW QUESTION 46
On the RAID management page, the disk status is listed as Initializing.
What does the status Initializing indicate about what the FortiAnalyzer is currently doing?
- A. FortiAnalyzer is functioning normally
- B. FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant
- C. FortiAnalyzer is ensuring that the parity data of a redundant drive is valid
- D. FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state
Answer: B
NEW QUESTION 47
What can the CLI command # diagnose test application oftpd 3 help you to determine?
- A. What ADOMs are enabled and configured
- B. What devices and IP addresses are connecting to FortiAnalyzer
- C. What logs, if any, are reaching FortiAnalyzer
- D. What devices are registered and unregistered
Answer: B
NEW QUESTION 48
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)
- A. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.
- B. SSL encryption levels are globally set on FortiAnalyzer.
- C. SSL is the default setting.
- D. SSL can send logs in real-time only.
- E. SSL communications are auto-negotiated between the two devices.
Answer: B,C
NEW QUESTION 49
Which statements are correct regarding FortiAnalyzer reports? (Choose two)
- A. FortiAnalyzer provides the ability to create custom reports.
- B. FortiAnalyzer glows you to schedule reports to run.
- C. FortiAnalyzer includes pre-defined reports only.
- D. FortiAnalyzer allows reporting for FortiGate devices only.
Answer: A,B
NEW QUESTION 50
Consider the CLI command:
What is the purpose of the command?
- A. To encrypt log communications
- B. To add a log file checksum
- C. To add a unique tag to each log to prove that it came from this FortiAnalyzer
- D. To add the MD5 hash value and authentication code
Answer: D
NEW QUESTION 51
Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally?
(Choose two.)
- A. Mail server
- B. Report scheduling
- C. Output profile
- D. SFTP server
Answer: C,D
NEW QUESTION 52
......
Focus on NSE5_FAZ-6.2 All-in-One Exam Guide For Quick Preparation: https://www.premiumvcedump.com/Fortinet/valid-NSE5_FAZ-6.2-premium-vce-exam-dumps.html