NSE5_FAZ-6.4 Free Practice Test

Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

1. A. In aggregation mode, you can forward logs to syslog and CEF servers as well.
2. B. Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.
3. C. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.
4. D. Both modes, forwarding and aggregation, support encryption of logs between devices.

Correct Answer: CD

Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.
What is the most likely problem?

1. A. CPU resources are too high
2. B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device
3. C. The total disk space is insufficient and you need to add other disk
4. D. The ADOM disk quota is set too low, based on log rates

Correct Answer: D

Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

1. A. Virtual domains
2. B. Administrative access profiles
3. C. Trusted hosts
4. D. Security Fabric

Correct Answer: BC

What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

1. A. SFTP, FTP, or SCP server
2. B. Mail server
3. C. Output profile
4. D. Report scheduling

Correct Answer: AC
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/6d9f8fb5-6cf4-11e9-81a4-0050569258 page 119
There is an option for "uploading reports to server" under configuring the output profile. The available options are: SFTP, FTP and SCP. You have to be careful on the question itself. The question tells you to "upload reports to a server (external server). Which means, a server has been configured already in this case prior to enabling the "upload reports to server".

What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

1. A. RADIUS
2. B. Local
3. C. LDAP
4. D. PKI
5. E. TACACS+

Correct Answer: ACE