Fortinet NSE5_FAZ-7.2 問題集

質問 1：
What is the purpose of using prefilters when configuring event handlers?
A. They are common filters applied simultaneously to all event handlers.
B. They download new filters to be used in event handlers.
C. They limit which logs are checked for matches by the other filters.
D. They can filter the logs before they are processed by FortiAnalyzer
正解：B

質問 2：
What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?
A. Shut down FortiAnalyzer and replace the disk
B. Run execute format disk to format and restart the FortiAnalyzer device.
C. Hot swap the disk.
D. There is no need to do anything because the disk will self-recover.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which two statements are true regarding fabric connectors? (Choose two.)
A. Storage connector service does not require a separate license to send logs to cloud platform.
B. Cloud-Out connections allow you to send real-time logs to pubic cloud accounts like Amazon S3, Azure Blob , and Google Cloud.
C. Configuring fabric connectors to send notification to ITSM platform upon incident creation Is more efficient than third-party information from the FortiAnalyzer API.
D. Fabric connectors allow to save storage costs and improve redundancy.
正解：B,C

質問 4：
Refer to the exhibit.

Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin", and coming from Laptop1.
Which filter will achieve the desired result?
A. operation-login & dstip==10.1.1.210 & user!-admin
B. operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin
C. operation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin
D. operation-login & performed_on=="GUI(10.1.1.210)" & user!=admin
正解：C

質問 5：
You have recently grouped multiple FortiGate devices into a single ADOM.System Settings>Storage Info shows the quota used.
What does the disk quota refer to?
A. The maximum disk utilization for the FortiAnalyzer model
B. The maximum disk utilization for each device in the ADOM
C. The maximum disk utilization for all devices in the ADOM
D. The maximum disk utilization for the ADOM type
正解：C

質問 6：
What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)
A. All FortiGates can send logs to FortiAnalyzer using the store and upload option.
B. Disk logging is enabled on the FortiGate through the CLI only.
C. Both secure communications methods (SSL and IPsec) allow the store and upload option.
D. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.
E. Disk logging is enabled by default on the FortiGate.
正解：B,C,D

質問 7：
On FortiAnalyzer, what is a wildcard administrator account?
A. An account that permits access to members of an LDAP group
B. An account that validates against any user account on a FortiAuthenticator
C. An account that requires two-factor authentication
D. An account that allows guest access with read-only privileges
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
What is the purpose of trigger variables?
A. To display statistics about the playbook runtime
B. To provide the trigger information to make the playbook start running
C. To use information from the trigger to filter the action in a task
D. To store the start times of playbooks with On_Schedule triggers
正解：A

質問 9：
What statements are true regarding disk log quota? (Choose two)
A. The FortiAnalyzer stops logging once the disk log quota is met.
B. The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.
C. The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.
D. The FortiAnalyzer automatically sets the disk log quota based on the device.
正解：B,C