Fortinet NSE5_FAZ-6.4 Exam Practice Questions and Answers

Question 6 of 30

What is the purpose of a predefined template on the FortiAnalyzer?

A.

It specifies the report layout which contains predefined texts, charts, and macros

B.

It specifies report settings which contains time period, device selection, and schedule

C.

It contains predefined data to generate mock reports

D.

It can be edited and modified as required

Question 7 of 30

An administrator has configured the following settings:
config system global
set log-checksum md5-auth
end
What is the significance of executing this command?

A.

This command records the log file MD5 hash value.

B.

This command records passwords in log files and encrypts them.

C.

This command encrypts log transfer between FortiAnalyzer and other devices.

D.

This command records the log file MD5 hash value and authentication code.

Question 8 of 30

Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

A.

SNMP

B.

IM

C.

SMS

D.

Email

Question 9 of 30

What are offline logs on FortiAnalyzer?

A.

Compressed logs, which are also known as archive logs, are considered to be offline logs.

B.

When you restart FortiAnalyzer, all stored logs are considered to be offline logs.

C.

Logs that are indexed and stored in the SQL database.

D.

Logs that are collected from offline devices after they boot up.

Question 10 of 30

Refer to the exhibit.
Exam NSE5_FAZ-6.4: Question 10 - Image 1

What does the data point at 14:35 tell you?

A.

FortiAnalyzer has temporary stopped receiving logs so older logs can be indexed.

B.

FortiAnalyzer is indexing logs faster than logs are being received.

C.

The fortilogd daemon is ahead in indexing by one log.

D.

FortiAnalyzer is dropping logs.