Pass Your NSE5_FAZ-7.0 Exam Easily With 100% Exam Passing Guarantee [2023]
NSE5_FAZ-7.0 Dumps are Available for Instant Access from ActualPDF
Fortinet NSE5_FAZ-7.0 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
NEW QUESTION 46
Refer to the exhibit.
Which image corresponds to the packet capture shown in the exhibit?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option A
- D. Option B
Answer: A
NEW QUESTION 47
Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)
- A. All administrators can create ADOMs--not just the admin administrator.
- B. Once enabled, the Device Manager, FortiView, Event Management, and Reports tab display per ADOM.
- C. ADOMs are enabled by default.
- D. ADOMs constrain other administrator's access privileges to a subset of devices in the device list.
Answer: B,D
NEW QUESTION 48
What is the purpose of the following CLI command?
- A. To encrypt log communications
- B. To add a log file checksum
- C. To add the MD's hash value and authentication code
- D. To add a unique tag to each log to prove that it came from this FortiAnalyzer
Answer: B
Explanation:
https://docs2.fortinet.com/document/fortianalyzer/6.0.3/cli-reference/849211/global
NEW QUESTION 49
An administrator has configured the following settings:
config system fortiview settings
set resolve-ip enable
end
What is the significance of executing this command?
- A. Use this command only if the source IP addresses are not resolved on FortiGate.
- B. It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.
- C. You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.
- D. It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.
Answer: D
NEW QUESTION 50
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)
- A. SSL encryption levels are globally set on FortiAnalyzer.
- B. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.
- C. SSL can send logs in real-time only.
- D. SSL communications are auto-negotiated between the two devices.
- E. SSL is the default setting.
Answer: A,E
NEW QUESTION 51
Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)
- A. Administrative access profiles
- B. Trusted hosts
- C. Virtual domains
- D. Security Fabric
Answer: A,B
Explanation:
Reference:
https://docs2.fortinet.com/document/fortianalyzer/6.0.0/administration-guide/581222/trusted-hosts
NEW QUESTION 52
An administrator has configured the following settings:
config system global
set log-checksum md5-auth
end
What is the significance of executing this command?
- A. This command records the log file MD5 hash value.
- B. This command encrypts log transfer between FortiAnalyzer and other devices.
- C. This command records passwords in log files and encrypts them.
- D. This command records the log file MD5 hash value and authentication code.
Answer: D
NEW QUESTION 53
What statements are true regarding disk log quota? (Choose two)
- A. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.
- B. The FortiAnalyzer automatically sets the disk log quota based on the device.
- C. The FortiAnalyzer stops logging once the disk log quota is met.
- D. The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.
Answer: A,D
NEW QUESTION 54
When working with FortiAnalyzer reports, what is the purpose of a dataset?
- A. To provide the layout used for reports
- B. To set the data included in templates
- C. To retrieve data from the database
- D. To define the chart type to be used
Answer: C
Explanation:
Reference:
Datasets: Structured Query Language (SQL) SELECT queries that extract specific data from the database
NEW QUESTION 55
Which statement is true when you are upgrading the firmware on an HA cluster made up of two FortiAnalyzer devices?
- A. You can perform the firmware upgrade using only a console connection.
- B. You can enable uninterruptible-upgrade so that the normal FortiAnalyzer operations are not interrupted while the cluster firmware upgrades.
- C. Both FortiAnalyzer devices will be upgraded at the same time.
- D. First, upgrade the secondary device, and then upgrade the primary device.
Answer: A
NEW QUESTION 56
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A. A remote LDAP server
- B. An administrator group
- C. A trusted host profile that restricts access to the LDAP group
- D. A local wildcard administrator account
Answer: A,D
NEW QUESTION 57
Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)
- A. Disk size
- B. Total quota
- C. License type
- D. RAID level
Answer: A,D
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/368682/disk-space-allocation
NEW QUESTION 58
What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?
- A. The log file is stored as a raw log and is available for analytic support.
- B. The log file rolls over and is archived.
- C. The log file is purged from the database.
- D. The log file is overwritten.
Answer: B
Explanation:
Reference:
81a4-00505692583a/FortiAnalyzer-6.0.5-Administration-Guide.pdf
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/355632/log-browse
NEW QUESTION 59
What are two advantages of setting up fabric ADOM? (Choose two.)
- A. It can include only FortiGate devices that are part of the same Security Fabric
- B. It can be used to facilitate communication between devices in same Security Fabric
- C. It can be used for fast data processing and log correlation
- D. It can include all Fortinet devices that are part of the same Security Fabric
Answer: C,D
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/448471/creating-a-security-fabric-adom
NEW QUESTION 60
Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?
- A. Application control logs
- B. Antivirus logs
- C. IPS logs
- D. Web filter logs
Answer: D
Explanation:
Reference:
FortiAnalyzer_Admin_Guide/3600_FortiView/0200_Using_FortiView/1200_Compromised_hosts_page.htm?
TocPath=FortiView%7CUsing%20FortiView%7C_____6
NEW QUESTION 61
What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?
- A. A FortiGate ADOM
- B. Valid FortiAnalyzer credentials
- C. A pre-shared key
- D. The FortiGate serial number
Answer: C
NEW QUESTION 62
What can you do on FortiAnalyzer to restrict administrative access from specific locations?
- A. Configure two-factor authentication with a remote RADIUS server.
- B. Enable geo-location services on accessible interface.
- C. Configure an ADOM for respective location.
- D. Configure trusted hosts for that administrator.
Answer: D
NEW QUESTION 63
Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?
- A. ORDER BY
- B. LIMIT
- C. FROM
- D. WHERE
Answer: C
NEW QUESTION 64
FortiAnalyzer centralizes which functions? (Choose three)
- A. Graphical reporting
- B. Vulnerability assessment
- C. Network analysis
- D. Security log analysis / forensics
- E. Content archiving / data mining
Answer: A,D,E
NEW QUESTION 65
Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?
- A. To properly correlate logs
- B. To use real-time forwarding
- C. To resolve host names
- D. To improve DNS response times
Answer: A
NEW QUESTION 66
An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email.
What could be the problem?
- A. Fortinet is assigned the Restricted_ User administrator profile.
- B. A trusted host is configured.
- C. ADOM mode is configured with Advanced mode.
- D. Fortinet is assigned the Standard_ User administrator profile.
Answer: D
Explanation:
* Super_User, which, like in FortiGate, provides access to all device and system privileges.
* Standard_User, which provides read and write access to device privileges, but not system privileges.
* Restricted_User, which provides read access only to device privileges, but not system privileges. Access to the Management extensions is also removed.
* No_Permissions_User, which provides no system or device privileges. Can be used, for example, to temporarily remove access granted to existing admins.
FortiAnalyzer_7.0_Study_Guide-Online page 42
NEW QUESTION 67
Which two statements are correct regarding the export and import of playbooks? (Choose two.)
- A. Playbooks can be exported and imported only within the same FortiAnaryzer.
- B. You can export only one playbook at a time.
- C. You can import a playbook even if there is another one with the same name in the destination.
- D. A playbook that was disabled when it was exported, will be disabled when it is imported.
Answer: C,D
NEW QUESTION 68
......
Study resources for the Valid NSE5_FAZ-7.0 Braindumps: https://www.actualpdf.com/NSE5_FAZ-7.0_exam-dumps.html
Latest NSE 5 Network Security Analyst NSE5_FAZ-7.0 Actual Free Exam Questions: https://drive.google.com/open?id=1nG8pmR3cE6lXNBwk5TQePUiAclWw0kuG
