Free NSE 5 Network Security Analyst NSE5_FAZ-6.4 Ultimate Study Guide (Updated 88 Questions)
Get to the Top with NSE5_FAZ-6.4 Practice Exam Questions
Fortinet NSE5_FAZ-6.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION 52
An administrator has configured the following settings:
config system global
set log-checksum md5-auth
end
What is the significance of executing this command?
- A. This command records the log file MD5 hash value.
- B. This command records passwords in log files and encrypts them.
- C. This command encrypts log transfer between FortiAnalyzer and other devices.
- D. This command records the log file MD5 hash value and authentication code.
Answer: D
NEW QUESTION 53
You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.
What is the recommended method to replace the disk?
- A. Shut down FortiAnalyzer and then replace the disk
- B. Downgrade your RAID level, replace the disk, and then upgrade your RAID level
- C. Perform a hot swap
- D. Clear all RAID alarms and replace the disk while FortiAnalyzer is still running
Answer: A
Explanation:
https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-swap-Hard-Disk-on-FortiAnalyzer/ta-p/194997?externalID=FD41397#:~:text=If%20a%20hard%20disk%20on,process%20known%20as%20hot%20swapping
NEW QUESTION 54
What FortiGate process caches logs when FortiAnalyzer is not reachable?
- A. logfiled
- B. sqlplugind
- C. oftpd
- D. miglogd
Answer: D
NEW QUESTION 55
In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.
How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?
- A. Configure local DNS servers on FortiAnalyzer
- B. Resolve IP addresses on FortiGate
- C. Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve
- D. Configure # set resolve-ip enable in the system FortiView settings
Answer: B
Explanation:
https://packetplant.com/fortigate-and-fortianalyzer-resolve-source-and-destination-ip/
"As a best practice, it is recommended to resolve IPs on the FortiGate end. This is because you get both source and destination, and it offloads the work from FortiAnalyzer. On FortiAnalyzer, this IP resolution does destination IPs only"
NEW QUESTION 56
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)
- A. IPsec is only enabled through the CLI on FortiAnalyzer.
- B. IPsec cannot be enabled if SSL is enabled as well.
- C. Must establish an IPsec tunnel ID and pre-shared key.
- D. Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated.
Answer: B
NEW QUESTION 57
What are the operating modes of FortiAnalyzer? (Choose two)
- A. Standalone
- B. Collector
- C. Manager
- D. Analyzer
Answer: B,D
NEW QUESTION 58
What is the purpose of the following CLI command?
- A. To add a log file checksum
- B. To add a unique tag to each log to prove that it came from this FortiAnalyzer
- C. To encrypt log communications
- D. To add the MD's hash value and authentication code
Answer: A
Explanation:
https://docs2.fortinet.com/document/fortianalyzer/6.0.3/cli-reference/849211/global
NEW QUESTION 59
What are offline logs on FortiAnalyzer?
- A. When you restart FortiAnalyzer. all stored logs are considered to be offline logs.
- B. Logs that are collected from offline devices after they boot up.
- C. Compressed logs, which are also known as archive logs, are considered to be offline logs.
- D. Logs that are indexed and stored in the SQL database.
Answer: C
NEW QUESTION 60
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)
- A. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.
- B. SSL can send logs in real-time only.
- C. SSL is the default setting.
- D. SSL encryption levels are globally set on FortiAnalyzer.
- E. SSL communications are auto-negotiated between the two devices.
Answer: C,D
NEW QUESTION 61
On FortiAnalyzer, what is a wildcard administrator account?
- A. An account that validates against any user account on a FortiAuthenticator
- B. An account that permits access to members of an LDAP group
- C. An account that allows guest access with read-only privileges
- D. An account that requires two-factor authentication
Answer: B
Explanation:
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/747268/configuring-wildcard-admin-accounts
NEW QUESTION 62
Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)
- A. Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.
- B. Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device.
- C. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version.
- D. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end.
Answer: C,D
NEW QUESTION 63
If you upgrade your FortiAnalyzer firmware, what report elements can be affected?
- A. Custom datasets
- B. Report settings
- C. Report scheduling
- D. Output profiles
Answer: A
NEW QUESTION 64
Which two purposes does the auto cache setting on reports serve? (Choose two.)
- A. It reduces report generation time.
- B. It reduces the log insert lag rate.
- C. It provides diagnostics on report generation time.
- D. It automatically updates the hcache when new logs arrive.
Answer: A,D
Explanation:
Reference:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/384416/how-auto-cache-works
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/86926/enabling-auto-cache
NEW QUESTION 65
Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?
- A. LIMIT
- B. FROM
- C. WHERE
- D. ORDER BY
Answer: B
Explanation:
Reference:
NEW QUESTION 66
FortiAnalyzer uses the Optimized Fabric Transfer Protocok (OFTP) over SSL for what purpose?
- A. To upload logs to an SFTP server
- B. To send an identical set of logs to a second logging server
- C. To prevent log modification during backup
- D. To encrypt log communication between devices
Answer: D
NEW QUESTION 67
What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?
- A. Export to Report Chart
- B. Custom View
- C. Chart Builder
- D. Dataset Library
Answer: C
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.0/cookbook/989203/building-charts-with-chart-builder
NEW QUESTION 68
How are logs forwarded when FortiAnalyzer is using aggregation mode?
- A. Logs are forwarded as they are received and content files are uploaded at a scheduled time.
- B. Logs and content files are stored and uploaded at a scheduled time.
- C. Logs and content files are forwarded as they are received.
- D. Logs are forwarded as they are received.
Answer: B
Explanation:
https://www.fortinetguru.com/2020/07/log-forwarding-fortianalyzer-fortios-6-2-3/
https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/420493/modes
NEW QUESTION 69
......
Pass Fortinet NSE5_FAZ-6.4 exam - questions - convert Tets Engine to PDF: https://www.validtorrent.com/NSE5_FAZ-6.4-valid-exam-torrent.html
Use Real NSE5_FAZ-6.4 Dumps Free Sample Questions and Practice Test Engine: https://drive.google.com/open?id=1zOP-N_oLy_lho3p83ArtwQ8oYulpFUwP