최신 NSE5_FAZ-7.2 무료덤프 - Fortinet NSE 5

문제1

Which log will generate an event with the status Contained?

A. An AV log with action=quarantine.

B. An AppControl log with action=blocked.

C. An IPS log with action=pass.

D. A WebFilter log with action=dropped.

정답: A

문제2

What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

A. All FortiGates can send logs to FortiAnalyzer using the store and upload option.

B. Disk logging is enabled on the FortiGate through the CLI only.

C. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.

D. Both secure communications methods (SSL and IPsec) allow the store and upload option.

E. Disk logging is enabled by default on the FortiGate.

정답: B,C,D

문제3

Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

A. SNMP

B. IM

C. SMS

D. Email

정답: A,D

문제4

In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices arenotresolving to a hostname.
How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?

A. Resolve IP addresses on FortiGate

B. Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve

C. Configure# set resolve-ip enablein the system FortiView settings

D. Configure local DNS servers on FortiAnalyzer

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Which two purposes does the auto cache setting on reports serve? (Choose two.)

A. It reduces report generation time.

B. It reduces the log insert lag rate.

C. It automatically updates the hcache when new logs arrive.

D. It provides diagnostics on report generation time.

정답: A,C

문제6

What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons?
(Choose three)

A. RADIUS

B. LDAP

C. TACACS+

D. PKI

E. Local

정답: A,B,C

문제7

How can you attach a report to an incident?

A. By attaching it to an event handler alert

B. From the properties of an existing incident

C. Saving it in JSON format, and then importing it

D. By editing the settings of the desired report

정답: B

문제8

What is the purpose of using prefilters when configuring event handlers?

A. They can filter the logs before they are processed by FortiAnalyzer

B. They limit which logs are checked for matches by the other filters.

C. They download new filters to be used in event handlers.

D. They are common filters applied simultaneously to all event handlers.

정답: C

문제9

What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?
(Choose two.)

A. Mail server

B. Output profile

C. Report scheduling

D. SFTP, FTP, or SCP server

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Which statement about the FortiSOAR management extension is correct?

A. It does not include a limited trial by default.

B. It requires a FortiManager configured to manage FortiGate

C. It runs as a docker container on FortiAnalyzer

D. It requires a dedicated FortiSOAR device or VM.

정답: C

최신 NSE5_FAZ-7.2 무료덤프 - Fortinet NSE 5 - FortiAnalyzer 7.2 Analyst

우리와 연락하기

유용한 링크

최신 업데이트