FortiAnalyzer 5.4 Specialist

Here you have the best Fortinet NSE5_FAZ-5.4 practice exam questions

Question 1 of 25

On FortiAnalyzer, what is a wildcard administrator account?

An account that permits access to members of a LDAP group

An account that allows guest access with read-only privileges

An account that requires two-factor authentication

An account that validates against any user account on a FortiAuthenticator

Correct Answer: D

Question 2 of 25

Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

Log forwarding in aggregation mode

Log upload

Log fetching

Indicators of Compromise

Correct Answer: C

Question 3 of 25

How does FortiAnalyzer retrieve specific log data from the database?

SQL FROM statement

SQL GET statement

SQL SELECT statement

SQL EXTRACT statement

Correct Answer: C

Question 4 of 25

Logs are being deleted from one of your ADOMs earlier than the configured setting for archiving in your data policy. What is the most likely problem?

Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device

CPU resources are too high

The ADOM disk quota is set too low based on log rates

The total disk space is insufficient and you need to add other disk

Correct Answer: C

Question 5 of 25

How do you restrict an administrator's access to a subset of your organization's ADOMs?

Set the ADOM mode to Advanced

Configure trusted hosts

Assign the ADOMs to the administrator's account

Assign the default Super_User administrator profile

Correct Answer: C