Valid Fortinet NSE5_FAZ-6.4 Exam Dumps With Fully Verified NSE5_FAZ-6.4 Questions and Answers

Eleanor2022-07-27T08:29:07+00:00

By Eleanor Fortinet, NSE 5 Network Security Analyst NSE5_FAZ-6.4, NSE5_FAZ-6.4 exam dumps 0 Comments

NSE5_FAZ-6.4 Fortinet NSE 5 – FortiAnalyzer 6.4 exam is still available for the Fortinet NSE 5 Network Security Analyst certification, if you are looking forward to passing the Fortinet NSE5_FAZ-6.4 exam successfully, you can come to ITPrepare to choose the most valid NSE5_FAZ-6.4 exam dumps as the preparation materials. The valid Fortinet NSE5_FAZ-6.4 exam dumps with fully verified NSE5_FAZ-6.4 questions and answers ensure that you can pass the Fortinet NSE 5 – FortiAnalyzer 6.4 certification exam without any difficulties. However, every candidate should know that NSE5_FAZ-6.4 exam will be retired on August 31, 2022. The NSE5_FAZ-7.0 Fortinet NSE 5 – FortiAnalyzer 7.0 is available online for your Fortinet NSE 5 certification.

Below are Fortinet NSE5_FAZ-6.4 free dumps demo online:

Page 1 of 3

1. Which two statements are true regarding ADOM modes? (Choose two.)

You can only change ADOM modes through CL

In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADO

In an advanced mode ADO

you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.

Normal mode is the default ADOM mode.

2. What is the recommended method of expanding disk space on a FortiAnalyzer VM?

From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage

From the VM host manager, expand the size of the existing virtual disk

From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk

From the VM host manager, add an additional virtual disk and rebuild your RAID array

3. What is the main purpose of using an NTP server on FortiAnalyzer and all of its registered devices?

Log correlation

Host name resolution

Log collection

Real-time forwarding

4. Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

SSL is the default setting.

SSL communications are auto-negotiated between the two devices.

SSL can send logs in real-time only.

SSL encryption levels are globally set on FortiAnalyzer.

FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.

5. Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

To properly correlate logs

To use real-time forwarding

To resolve host names

To improve DNS response times

6. What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log

settings?

The log file is stored as a raw log and is available for analytic support.

The log file rolls over and is archived.

The log file is purged from the database.

The log file is overwritten.

7. If you upgrade the FortiAnalyzer firmware, which report element can be affected?

Custom datasets

Report scheduling

Report settings

Output profiles

8. On FortiAnalyzer, what is a wildcard administrator account?

An account that permits access to members of an LDAP group

An account that allows guest access with read-only privileges

An account that requires two-factor authentication

An account that validates against any user account on a FortiAuthenticator

9. You need to upgrade your FortiAnalyzer firmware.

What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

FortiAnalyzer uses log fetching to retrieve the logs when back online

FortiGate uses the miglogd process to cache the logs

The logfiled process stores logs in offline mode

Logs are dropped

10. View the exhibit.

Why is the total quota less than the total system storage?

3.6% of the system storage is already being used.

Some space is reserved for system use, such as storage of compression files, upload files, and temporary report files

The oftpd process has not archived the logs yet

The logfiled process is just estimating the total quota

Page 2 of 3

11. What statements are true regarding FortiAnalyzer 's treatment of high availability (HA)

dusters? (Choose two)

FortiAnalyzer distinguishes different devices by their serial number.

FortiAnalyzer receives logs from d devices in a duster.

FortiAnalyzer receives bgs only from the primary device in the cluster.

FortiAnalyzer only needs to know (he serial number of the primary device in the cluster-it automaticaly discovers the other devices.

12. After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

execute sql-local rebuild-adom <new-ADOM-name>

To reset the disk quota enforcement to default

To remove the analytics logs of the device from the old database

To migrate the archive logs to the new ADOM

To populate the new ADOM with analytical logs for the moved device, so you can run reports

13. What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

All FortiGates can send logs to FortiAnalyzer using the store and upload option.

Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.

Both secure communications methods (SSL and IPsec) allow the store and upload option.

Disk logging is enabled on the FortiGate through the CLI only.

Disk logging is enabled by default on the FortiGate.

14. Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated.

Must establish an IPsec tunnel ID and pre-shared key.

IPsec cannot be enabled if SSL is enabled as well.

IPsec is only enabled through the CLI on FortiAnalyzer.

15. How do you restrict an administrator’s access to a subset of your organization’s ADOMs?

Set the ADOM mode to Advanced

Assign the ADOMs to the administrator’s account

Configure trusted hosts

Assign the default Super_User administrator profile

16. 1.On the RAID management page, the disk status is listed as Initializing.

What does the status Initializing indicate about what the FortiAnalyzer is currently doing?

FortiAnalyzer is ensuring that the parity data of a redundant drive is valid

FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state

FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant

FortiAnalyzer is functioning normally

17. Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

A local wildcard administrator account

A remote LDAP server

A trusted host profile that restricts access to the LDAP group

An administrator group

18. Consider the CLI command:

What is the purpose of the command?

To add a unique tag to each log to prove that it came from this FortiAnalyzer

To add the MD5 hash value and authentication code

To add a log file checksum

To encrypt log communications

19. Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Antivirus logs

Web filter logs

IPS logs

Application control logs

20. What can you do on FortiAnalyzer to restrict administrative access from specific locations?

Configure trusted hosts for that administrator.

Enable geo-location services on accessible interface.

Configure two-factor authentication with a remote RADIUS server.

Configure an ADOM for respective location.

Page 3 of 3

21. If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the

FortiAnalyzer back to functioning normally, without losing data?

Hot swap the disk

Replace the disk and rebuild the RAID manually

Take no action if the RAID level supports a failed disk

Shut down FortiAnalyzer and replace the disk

22. In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.

How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

Configure local DNS servers on FortiAnalyzer

Resolve IPs on FortiGate

Configure # set resolve-ip enable in the system FortiView settings

Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

23. What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

Chart Builder

Export to Report Chart

Dataset Library

Custom View

24. Refer to the exhibit.

The exhibit shows “remoteservergroup” is an authentication server group with LDAP and RADIUS servers.

Which two statements express the significance of enabling “Match all users on remote server” when configuring a new administrator? (Choose two.)

It creates a wildcard administrator using LDAP and RADIUS servers.

Administrator can log in to FortiAnalyzer using their credentials on remote servers LDAP and RADIU

Use remoteadmin from LDAP and RADIUS servers will be able to log in to FortiAnalyzer at anytime.

It allows administrators to use two-factor authentication.

25. For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:

Use DNS

Use host name resolution

Use real-time forwarding

Use an NTP server

26. A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.

What can you do on FortiAnalyzer to accomplish this?

Click FortiView and generate a report for that administrator.

Click Task Monitor and view the tasks performed by that administrator.

Click Log View and generate a report for that administrator.

View the tasks performed by the rogue administrator in Fabric View.

27. Which statement is true regarding Macros on FortiAnalyzer?

Macros are ADOM specific and each ADOM will have unique macros relevant to that ADO

Macros are supported only on the FortiGate ADO

Macros are useful in generating excel log files automatically based on the reports settings.

Macros are predefined templates for reports and cannot be customized.

28. An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1.

What should the administrator do to solve this issue?

Use the execute sql-local rebuild-db command to rebuild all ADOM databases.

Use the execute sql-local rebuild-adom ADOM1 command to rebuild the ADOM database.

Use the execute sql-report run ADOM1 command to run a report.

Use the execute sql-local rebuild-adom root command to rebuild the ADOM database.

29. View the exhibit:

What does the 1000MB maximum for disk utilization refer to?

The disk quota for the FortiAnalyzer model

The disk quota for all devices in the ADOM

The disk quota for each device in the ADOM

The disk quota for the ADOM type

30. How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

Use static routes

Use administrative profiles

Use trusted hosts

Use secure protocols

Valid Fortinet NSE5_FAZ-6.4 Exam Dumps With Fully Verified NSE5_FAZ-6.4 Questions and Answers