NSE5_FAZ-7.0 시험 - Fortinet실제시험문제와 답 - 114문항

Question No : 1

Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

A.FROM
B.LIMIT
C.WHERE
D.ORDER BY

정답:
Explanation:
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD48500

Question No : 2

Refer to the exhibit.

Which image corresponds to the packet capture shown in the exhibit?
A)

B)

C)

D)

A.Option A
B.Option B
C.Option C
D.Option D

정답:

Question No : 3

What is the recommended method of expanding disk space on a FortiAnalyzer VM?

A.From the VM host manager, add an additional virtual disk and use the #execute lvm extend <disk number> command to expand the storage
B.From the VM host manager, expand the size of the existing virtual disk
C.From the VM host manager, expand the size of the existing virtual disk and use the # execute format disk command to reformat the disk
D.From the VM host manager, add an additional virtual disk and rebuild your RAID array

정답:
Explanation:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD40848

Question No : 4

In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname .
How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

A.Configure local DNS servers on FortiAnalyzer
B.Resolve IPs on FortiGate
C.Configure # set resolve-ip enable in the system FortiView settings
D.Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

정답:

Question No : 5

An administrator fortinet, is able to view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mall server that can be used to send email.
What could be the problem?

A.Fortinet is assigned the Standard_ User administrator profile.
B.A trusted host is configured.
C.ADOM mode is configured with Advanced mode.
D.Fortinet is assigned the Restricted_ User administrator profile.

정답:

Question No : 6

You’ve moved a registered logging device out of one ADOM and into a new ADOM .
What happens when you rebuild the new ADOM database?

A.FortiAnalyzer resets the disk quota of the new ADOM to default.
B.FortiAnalyzer migrates archive logs to the new ADO
C.FortiAnalyzer migrates analytics logs to the new ADO
D.FortiAnalyzer removes logs from the old ADO

정답:
Explanation:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD40383

Question No : 7

An administrator has configured the following settings:
config system fortiview settings
set resolve-ip enable
end
What is the significance of executing this command?

A.Use this command only if the source IP addresses are not resolved on FortiGate.
B.It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.
C.You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.
D.It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

정답:
Explanation:
Reference: https://community.fortinet.com/t5/Fortinet-Forum/Hostnames-in-FortiAnalyzer/m-p/95351?m=156950

Question No : 8

For which two purposes would you use the command set log checksum? (Choose two.)

A.To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server
B.To prevent log modification or tampering
C.To encrypt log communications
D.To send an identical set of logs to a second logging server

정답:

Question No : 9

What can the CLI command # diagnose test application oftpd 3 help you to determine?

A.What devices and IP addresses are connecting to FortiAnalyzer
B.What logs, if any, are reaching FortiAnalyzer
C.What ADOMs are enabled and configured
D.What devices are registered and unregistered

정답:
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/cli-reference/395556/test#test_application

Question No : 10

How can you configure FortiAnalyzer to permit administrator logins from only specific locations?

A.Use static routes
B.Use administrative profiles
C.Use trusted hosts
D.Use secure protocols

정답:
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/186508/trusted-hosts

3 1. Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)
A. FortiAnalyzer HA can function without VRRP. and VRRP is required only if you have more than two FortiAnalyzer devices in a cluster.
B. FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.
C. All devices in a FortiAnalyzer HA cluster must run in the same operation mode: analyzer or collector.
D. FortiAnalyzer HA implementation is supported by many public cloud infrastructures such as AWS, Microsoft Azure, and Google Cloud.
Answer: B,C
Explanation:
Reference: https://help.fortinet.com/fa/faz50hlp/60/6-0-2/Content/FMG-FAZ/4600_HA/0000_HA.htm?TocPath=High%20Availability%7C_____0

Question No : 11

What does the disk status Degraded mean for RAID management?

A.One or more drives are missing from the FortiAnalyzer unit. The drive is no longer available to the operating system.
B.The FortiAnalyzer device is writing to all the hard drives on the device in order to make the array fault tolerant.
C.The FortiAnalyzer device is writing data to a newly added hard drive in order to restore the hard drive to an optimal state.
D.The hard driveiIs no longer being used by the RAID controller

정답:

Question No : 12

What can you do on FortiAnalyzer to restrict administrative access from specific locations?

A.Configure trusted hosts for that administrator.
B.Enable geo-location services on accessible interface.
C.Configure two-factor authentication with a remote RADIUS server.
D.Configure an ADOM for respective location.

정답:
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/6.2.0/hardening-your-fortigate/582009/system-administrator-best-practices

Question No : 13

In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

A.Remote logging must be enabled on FortiGate
B.Log encryption must be enabled
C.ADOMs must be enabled
D.FortiGate must be registered with FortiAnalyzer

정답:
Explanation:
Pg 70: “after you add and register a FortiGate device with the FortiAnalyzer unit, you must also ensure that the FortiGate device is configured to send logs to the FortiAnalyzer unit.”
https://docs.fortinet.com/uploaded/files/4614/FortiAnalyzer-5.4.6-Administration%20Guide.pdf
Pg 45: “ADOMs must be enabled to support the logging and reporting of NON-FORTIGATE devices, such as FortiCarrier, FortiClientEMS, FortiMail, FortiWeb, FortiCache, and FortiSandbox.”

Question No : 14

After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?
execute sql-local rebuild-adom <new-ADOM-name>

A.To reset the disk quota enforcement to default
B.To remove the analytics logs of the device from the old database
C.To migrate the archive logs to the new ADOM
D.To populate the new ADOM with analytical logs for the moved device, so you can run reports

정답:

Question No : 15

Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

A.To properly correlate logs
B.To use real-time forwarding
C.To resolve host names
D.To improve DNS response times

정답:

Fortinet NSE5_FAZ-7.0 시험