NSE5_FAZ-6.4 Exam Training Practice Tests (Fortinet NSE 5

Question 1

Which two purposes does the auto cache setting on reports serve? (Choose two.)

A. It provides diagnostics on report generation time. B. It reduces report generation time. C. It reduces the log insert lag rate. D. It automatically updates the hcache when new logs arrive.

Correct Answer: B,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

By default, what happens when a log file reaches its maximum file size?

A. FortiAnalyzer stops logging. B. FortiAnalyzer rolls the active log by renaming the file. C. FortiAnalyzer overwrites the log files. D. FortiAnalyzer forwards logs to syslog.

Correct Answer: B

Question 3

What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

A. The log file is stored as a raw log and is available for analytic support. B. The log file is overwritten. C. The log file rolls over and is archived. D. The log file is purged from the database.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

On FortiAnalyzer, what is a wildcard administrator account?

A. An account that allows guest access with read-only privileges B. An account that requires two-factor authentication C. An account that permits access to members of an LDAP group D. An account that validates against any user account on a FortiAuthenticator

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)

A. When in collector mode. FortiAnalyzer supports event management and reporting features. B. Collector mode is the default operating mode. C. By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting D. When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.
What is the most likely problem?

A. CPU resources are too high B. Disk utilization for archive logs is set for 15 days C. Quota enforcement is acting on analytical data before a report is complete D. Logs are rolling before the report is run

Correct Answer: D

Question 7

Which daemon is responsible for enforcing raw log file size?

A. logfiled B. oftpd C. sqlplugind D. miglogd

Correct Answer: A

Question 8

The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device.
What can be the reason for this failure?

A. ADOMs are not enabled on FortiAnalyzer. B. ADOM mode should be set to advanced, in order to register the FortiClient EMS device. C. FortiAnalyzer is in an HA cluster. D. A separate license is required on FortiAnalyzer in order to register the FortiClient EMS device.

Correct Answer: A

Question 9

View the exhibit.

What does the data point at 14:35 tell you?

A. The sqlplugind daemon is ahead in indexing by one log. B. FortiAnalyzer has temporarily stopped receiving logs so older logs' can be indexed. C. FortiAnalyzer is indexing logs faster than logs are being received. D. FortiAnalyzer is dropping logs.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Which two statements are true regarding ADOM modes? (Choose two.)

A. In an advanced mode ADOM. you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs. B. You can only change ADOM modes through CLI. C. In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADOM. D. Normal mode is the default ADOM mode.

Correct Answer: A,D

Fortinet NSE 5 - FortiAnalyzer 6.4 - NSE5_FAZ-6.4 Exam Practice Test