必ず合格できるFortinet NSE5_FAZ-7.0試験の正確な116問題と解答あります
最新 [2023年10月31日]2023年最新の実際にある検証済みのNSE5_FAZ-7.0問題集
質問 # 61
For proper log correlation between the logging devices and FortiAnalyzer, FortiAnalyzer and all registered devices should:
- A. Use an NTP server
- B. Use real-time forwarding
- C. Use DNS
- D. Use host name resolution
正解：A
質問 # 62
Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?
- A. ORDER BY
- B. FROM
- C. LIMIT
- D. WHERE
正解：B
質問 # 63
Refer to the exhibit.
Which statement is correct regarding the event displayed?
- A. The security risk was blocked or dropped.
- B. The security event risk is considered open.
- C. An incident was created from this event.
- D. The risk source is isolated.
正解：A
質問 # 64
View the exhibit:
What does the 1000MB maximum for disk utilization refer to?
- A. The disk quota for the ADOM type
- B. The disk quota for all devices in the ADOM
- C. The disk quota for each device in the ADOM
- D. The disk quota for the FortiAnalyzer model
正解：B
解説：
https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/743670/configuring-log-storage-policy
質問 # 65
Refer to the exhibits.
How many events will be added to the incident created after running this playbook?
- A. Five events will be added.
- B. No events will be added.
- C. Ten events will be added.
- D. Thirteen events will be added.
正解：C
質問 # 66
Refer to the exhibit.
What is the purpose of using the Chart Builder feature on FortiAnalyzer?
- A. You can add charts to generated reports using this feature.
- B. In Log View, this feature allows you to build a dataset and chart automatically, based on the filtered search results.
- C. In Log View, this feature allows you to build a chart and chart automatically, on the top 100 log entries.
- D. This feature allows you to build a chart under FortiView.
正解：B
質問 # 67
Consider the CLI command:
What is the purpose of the command?
- A. To add a log file checksum
- B. To encrypt log communications
- C. To add a unique tag to each log to prove that it came from this FortiAnalyzer
- D. To add the MD5 hash value and authentication code
正解：A
解説：
https://docs.fortinet.com/document/fortianalyzer/6.2.5/cli-reference/849211/global
質問 # 68
For which two purposes would you use the command set log checksum? (Choose two.)
- A. To encrypt log communications
- B. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server
- C. To send an identical set of logs to a second logging server
- D. To prevent log modification or tampering
正解：B、D
質問 # 69
Which two purposes does the auto cache setting on reports serve? (Choose two.)
- A. It reduces report generation time.
- B. It reduces the log insert lag rate.
- C. It automatically updates the hcache when new logs arrive.
- D. It provides diagnostics on report generation time.
正解：A、C
解説：
Reference:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/384416/how-auto-cache-works
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/86926/enabling-auto-cache
質問 # 70
What statements are true regarding FortiAnalyzer 's treatment of high availability (HA) dusters? (Choose two)
- A. FortiAnalyzer receives logs from d devices in a duster.
- B. FortiAnalyzer only needs to know (he serial number of the primary device in the cluster-it automaticaly discovers the other devices.
- C. FortiAnalyzer distinguishes different devices by their serial number.
- D. FortiAnalyzer receives bgs only from the primary device in the cluster.
正解：A、C
質問 # 71
On FortiAnalyzer, what is a wildcard administrator account?
- A. An account that allows guest access with read-only privileges
- B. An account that requires two-factor authentication
- C. An account that validates against any user account on a FortiAuthenticator
- D. An account that permits access to members of an LDAP group
正解：D
解説：
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/747268/configuring-wildcard-admin-accounts
質問 # 72
An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1.
What should the administrator do to solve this issue?
- A. Use the execute sql-local rebuild-db command to rebuild all ADOM databases.
- B. Use the execute sql-local rebuild-adom ADOM1 command to rebuild the ADOM database.
- C. Use the execute sql-report run ADOM1 command to run a report.
- D. Use the execute sql-local rebuild-adom root command to rebuild the ADOM database.
正解：B
質問 # 73
Refer to the exhibit.
The image displays the configuration of a FortiAnalyzer the administrator wants to join to an existing HA cluster.
What can you conclude from the configuration displayed?
- A. This FortiAnalyzer will trigger a failover after losing communication with its peers for 10 seconds.
- B. After joining to the cluster, this FortiAnalyzer will keep an updated log database.
- C. This FortiAnalyzer will join to the existing HA cluster as the primary.
- D. This FortiAnalyzer is configured to receive logs in its port1.
正解：D
解説：
"If the preferred role is Primary, then this unit becomes the primary unit if it is configured first in a new HA cluster. If there is an existing primary unit, then this unit becomes a secondary unit." (https://docs.fortinet.com/document/fortianalyzer/7.0.5/administration-guide/275104)
質問 # 74
On the RAID management page, the disk status is listed as Initializing.
What does the status Initializing indicate about what the FortiAnalyzer is currently doing?
- A. FortiAnalyzer is ensuring that the parity data of a redundant drive is valid
- B. FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant
- C. FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state
- D. FortiAnalyzer is functioning normally
正解：B
解説：
Reference:
8977-00505692583a/FortiAnalyzer-5.6.10-Administration-Guide.pdf (40)
質問 # 75
You crested a playbook on FortiAnalyzer that uses a FortiOS connector
When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stitch are available in the FortiOS connector?
- A. FortiAnalyzer Event Handler
- B. Fabric Connector event
- C. Incoming webhook
- D. FortiOS Event Log
正解：C
解説：
"One possible scenario is shown on the slide:
1. Traffic flows through the FortiGate
2. FortiGate sends logs to FortiAnalyzer
3. FortiAnalyzer detects some suspicious traffic and generates an event
4. The event triggers the execution of a playbook in FortiAnalyzer, which sends a webhook call to FortiGate so that it runs an automation stitch
5. FortiGate runs the automation stitch with the corrective or preventive actions" FortiAnalyzer_7.0_Study_Guide-Online page 228 In order to see the actions related to the FOS connector, you must enable an automation rule using the Incoming Webhook Call trigger on the FortiGate side. FortiAnalyzer_7.0_Study Guide page no 233
質問 # 76
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)
- A. SSL communications are auto-negotiated between the two devices.
- B. SSL encryption levels are globally set on FortiAnalyzer.
- C. SSL can send logs in real-time only.
- D. SSL is the default setting.
- E. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.
正解：B、D
質問 # 77
Refer to the exhibit.
Which statement is correct regarding the event displayed?
- A. The security risk was blocked or dropped.
- B. The security event risk is considered open.
- C. An incident was created from this event.
- D. The risk source is isolated.
正解：A
解説：
Events in FortiAnalyzer will be in one of four statuses. The current status will determine if more actions need to be taken by the security team or not.
The possible statuses are:
Unhandled: The security event risk is not mitigated or contained, so it is considered open.
Contained: The risk source is isolated.
Mitigated: The security risk is mitigated by being blocked or dropped.
(Blank): Other scenarios.
FortiAnalyzer_7.0_Study_Guide-Online pag. 206
質問 # 78
If you upgrade your FortiAnalyzer firmware, what report elements can be affected?
- A. Report scheduling
- B. Output profiles
- C. Report settings
- D. Custom datasets
正解：D
質問 # 79
What is the purpose of a dataset query in FortiAnalyzer?
- A. It retrieves log data from the database
- B. It extracts the database schema
- C. It sorts log data into tables
- D. It injects log data into the database
正解：A
質問 # 80
Which statement is true when you are upgrading the firmware on an HA cluster made up of two FortiAnalyzer devices?
- A. You can enable uninterruptible-upgrade so that the normal FortiAnalyzer operations are not interrupted while the cluster firmware upgrades.
- B. Both FortiAnalyzer devices will be upgraded at the same time.
- C. You can perform the firmware upgrade using only a console connection.
- D. First, upgrade the secondary device, and then upgrade the primary device.
正解：D
解説：
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 64: To upgrade FortiAnalyzer HA cluster firmware:
1. Log in to each secondary device.
2. Upgrade the firmware of all secondary devices.
3. Wait for the upgrades to complete and verify that all secondary devices joined the cluster.
4. Verify that logs on all secondary devices are synchronized with the primary device.
5. Upgrade the primary device.
https://docs.fortinet.com/document/fortianalyzer/7.2.0/upgrade-guide/262607/upgrading-fortianalyzer-firmware
質問 # 81
What FortiGate process caches logs when FortiAnalyzer is not reachable?
- A. sqlplugind
- B. oftpd
- C. miglogd
- D. logfiled
正解：C
質問 # 82
What is Log Insert Lag Time on FortiAnalyzer?
- A. The number of times in the logs where end users experienced slowness while accessing resources.
- B. The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer.
- C. The amount of lag time that occurs when the administrator is rebuilding the ADOM database.
- D. The amount of time FortiAnalyzer takes to receive logs from a registered device
正解：B
質問 # 83
Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)
- A. SMS
- B. IM
- C. SNMP
- D. Email
正解：C、D
解説：
Reference:
FortiAnalyzer_Admin_Guide/1800_Events/0200_Event_handlers/0600_Create_event_handlers.htm
質問 # 84
......
Fortinet NSE5_FAZ-7.0試験は、Network Security ProfessionalがFortinetセキュリティデバイスを分析し、潜在的なセキュリティの脅威を特定し、軽減するのに役立つレポートを生成するために必要なスキルと知識を検証する業界に認識された認定です。この認定試験は、Fortinet製品を扱った経験があり、ネットワークセキュリティ管理のスキルと知識を向上させようとしている個人向けに設計されています。
無料でゲット！2023年最新のに更新されたFortinet NSE5_FAZ-7.0試験問題と解答：https://jp.fast2test.com/NSE5_FAZ-7.0-premium-file.html
合格させるNSE5_FAZ-7.0試験には更新された116問題あります：https://drive.google.com/open?id=1pA0Lb_roq-VjwW_Bp_y6uZ98fyWohFVU