Fortinet NSE5_FAZ-6.4 問題集

質問 1：
Which statements are correct regarding FortiAnalyzer reports? (Choose two)
A. FortiAnalyzer glows you to schedule reports to run.
B. FortiAnalyzer includes pre-defined reports only.
C. FortiAnalyzer allows reporting for FortiGate devices only.
D. FortiAnalyzer provides the ability to create custom reports.
正解：A,D

質問 2：
What are offline logs on FortiAnalyzer?
A. When you restart FortiAnalyzer. all stored logs are considered to be offline logs.
B. Logs that are collected from offline devices after they boot up.
C. Logs that are indexed and stored in the SQL database.
D. Compressed logs, which are also known as archive logs, are considered to be offline logs.
正解：D

質問 3：
Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?
A. Antivirus logs
B. Application control logs
C. IPS logs
D. Web filter logs
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?
A. Logs are dropped
B. FortiAnalyzer uses log fetching to retrieve the logs when back online
C. FortiGate uses the miglogd process to cache the logs
D. The logfiled process stores logs in offline mode
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
What can you do on FortiAnalyzer to restrict administrative access from specific locations?
A. Configure trusted hosts for that administrator.
B. Enable geo-location services on accessible interface.
C. Configure an ADOM for respective location.
D. Configure two-factor authentication with a remote RADIUS server.
正解：A

質問 6：
Refer to the exhibit.

What does the data point at 14:55 tell you?
A. The received rate is almost at its maximum for this device
B. Raw logs are reaching FortiAnalyzer faster than they can be indexed
C. Logs are being dropped
D. The sqlplugind daemon is behind in log indexing by two logs
正解：B

質問 7：
Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?
A. To resolve host names
B. To properly correlate logs
C. To improve DNS response times
D. To use real-time forwarding
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)
A. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.
B. In aggregation mode, you can forward logs to syslog and CEF servers as well.
C. Both modes, forwarding and aggregation, support encryption of logs between devices.
D. Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.
正解：A,D

質問 9：
Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?
A. The total disk space is insufficient and you need to add other disk.
B. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.
C. CPU resources are too high.
D. The ADOM disk quota is set too low based on log rates.
正解：D
解説: (Topexam メンバーにのみ表示されます)