NSE5_FAZ-7.0 Exam Training Practice Tests (Fortinet NSE 5

Question 1

Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.
What is the most likely problem?

A. CPU resources are too high B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device C. The total disk space is insufficient and you need to add other disk D. The ADOM disk quota is set too low, based on log rates

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit.

Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1:
Which filter will achieve the desired result?

A. operation-login & performed_on=="GUI(10.1.1.210)' & user!=admin B. operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin C. operation-login & dstip==10.1.1.210 & userl-admin D. operation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

A. CPU resources are too high. B. The ADOM disk quota is set too low based on log rates. C. The total disk space is insufficient and you need to add other disk. D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

When working with FortiAnalyzer reports, what is the purpose of a dataset?

A. To set the data included in templates B. To retrieve data from the database C. To provide the layout used for reports D. To define the chart type to be used

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

What are the operating modes of FortiAnalyzer? (Choose two)

A. Standalone B. Collector C. Analyzer D. Manager

Correct Answer: B,C

Question 6

If the primary FortiAnalyzer in an HA cluster fails, how is the new primary elected?

A. The configured IP address is checked first. B. The firmware version is checked first. C. The configured priority is checked first D. The active port number is checked first.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

What are analytics logs on FortiAnalyzer?

A. Raw logs that are compressed and saved to a log file. B. Log type Traffic logs. C. Logs that are indexed and stored in the SQL. D. Logs that roll over when the log file reaches a specific size.

Correct Answer: C

Question 8

Which two statements are true regarding fabric connectors? (Choose two.)

A. Configuring fabric connectors to send notification to ITSM platform upon incident creation Is more efficient than third-party information from the FortiAnalyzer API. B. Cloud-Out connections allow you to send real-time logs to pubic cloud accounts like Amazon S3, Azure Blob , and Google Cloud. C. Fabric connectors allow to save storage costs and improve redundancy. D. Storage connector service does not require a separate license to send logs to cloud platform.

Correct Answer: A,B

Question 9

When you perform a system backup, what does the backup configuration contain? (Choose two.)

A. Device list B. Authorized devices logs C. Generated reports D. System information

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

A. Total quota B. License type C. RAID level D. Disk size

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 5 - FortiAnalyzer 7.0 - NSE5_FAZ-7.0 Exam Practice Test