Fortinet NSE5_FAZ-6.4 問題集

質問 1：
Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?
A. Antivirus logs
B. Application control logs
C. IPS logs
D. Web filter logs
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
What are analytics logs on FortiAnalyzer?
A. Logs that roll over when the log file reaches a specific size.
B. Log type Traffic logs.
C. Raw logs that are compressed and saved to a log file.
D. Logs that are indexed and stored in the SQL.
正解：D

質問 3：
Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)
A. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version.
B. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end.
C. Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.
D. Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device.
正解：A,D

質問 4：
Which two statements are true regarding fabric connectors? (Choose two.)
A. Storage connector service does not require a separate license to send logs to cloud platform.
B. Cloud-Out connections allow you to send real-time logs to pubic cloud accounts like Amazon S3, Azure Blob , and Google Cloud.
C. Configuring fabric connectors to send notification to ITSM platform upon incident creation Is more efficient than third-party information from the FortiAnalyzer API.
D. Fabric connectors allow to save storage costs and improve redundancy.
正解：B,C

質問 5：
What statements are true regarding disk log quota? (Choose two)
A. The FortiAnalyzer stops logging once the disk log quota is met.
B. The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.
C. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.
D. The FortiAnalyzer automatically sets the disk log quota based on the device.
正解：B,C

質問 6：
Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)
A. By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting
B. When in collector mode. FortiAnalyzer supports event management and reporting features.
C. When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.
D. Collector mode is the default operating mode.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?
A. The total disk space is insufficient and you need to add other disk.
B. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.
C. CPU resources are too high.
D. The ADOM disk quota is set too low based on log rates.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You have recently grouped multiple FortiGate devices into a single ADOM. System Settings > Storage Info shows the quota used.
What does the disk quota refer to?
A. The maximum disk utilization for the FortiAnalyzer model
B. The maximum disk utilization for each device in the ADOM
C. The maximum disk utilization for all devices in the ADOM
D. The maximum disk utilization for the ADOM type
正解：C

質問 9：
Which two purposes does the auto cache setting on reports serve? (Choose two.)
A. It automatically updates the hcache when new logs arrive.
B. It reduces report generation time.
C. It provides diagnostics on report generation time.
D. It reduces the log insert lag rate.
正解：A,B
解説: (Topexam メンバーにのみ表示されます)