NSE5_FAZ-6.2 Free Practice Test

In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

1. A. Remote logging must be enabled on FortiGate
2. B. Log encryption must be enabled
3. C. ADOMs must be enabled
4. D. FortiGate must be registered with FortiAnalyzer

Correct Answer: AD

What purposes does the auto-cache setting on reports serve? (Choose two.)

1. A. To reduce report generation time
2. B. To automatically update the hcache when new logs arrive
3. C. To reduce the log insert lag rate
4. D. To provide diagnostics on report generation time

Correct Answer: AB

Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

1. A. The total disk space is insufficient and you need to add other disk.
2. B. CPU resources are too high.
3. C. The ADOM disk quota is set too low based on log rates.
4. D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.

Correct Answer: C

FortiAnalyzer centralizes which functions? (Choose three)

1. A. Network analysis
2. B. Graphical reporting
3. C. Content archiving / data mining
4. D. Vulnerability assessment
5. E. Security log analysis / forensics

Correct Answer: BCE

In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

1. A. Configure local DNS servers on FortiAnalyzer
2. B. Resolve IPs on FortiGate
3. C. Configure # set resolve-ip enable in the system FortiView settings
4. D. Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

Correct Answer: B