NSE5_FAZ-7.2 Exam Training Practice Tests (Fortinet NSE 5

Question 1

What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?
(Choose two.)

A. Output profile B. SFTP, FTP, or SCP server C. Report scheduling D. Mail server

Correct Answer: A,B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Which daemon is responsible for enforcing the log file size?

A. logfiled B. ofrpd C. sqlplugind D. miglogd

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit.

Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?

A. All devices listed can be members B. FortiAnalyzer1 and FortiAnalyzer2 C. FortiAnalyzerl and FortiAnalyzer3 D. FortiAnalyzer2 and FortiAnalyzer3

Correct Answer: A

Question 4

Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

A. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end. B. Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device. C. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version. D. Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.

Correct Answer: B,C

Question 5

For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

A. Use real-time forwarding B. Use host name resolution C. Use DNS D. Use an NTP server

Correct Answer: D

Question 6

What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

A. The log file is stored as a raw log and is available for analytic support. B. The log file is overwritten. C. The log file rolls over and is archived. D. The log file is purged from the database.

Correct Answer: C

Question 7

If the primary FortiAnalyzer in an HA cluster fails, how is the new primary elected?

A. The configured IP address is checked first. B. The firmware version is checked first. C. The configured priority is checked first D. The active port number is checked first.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 5 - FortiAnalyzer 7.2 Analyst - NSE5_FAZ-7.2 Exam Practice Test