NSE5_FAZ-7.2試験無料問題集（140題）「Fortinet NSE 5

出題：1

For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)

A. Principal

B. Service provider

C. Identity provider

D. Identity collector

正解：B,C 解答を投票する

出題：2

Which two statements are true regarding ADOM modes? (Choose two.)

A. You can only change ADOM modes through CLI.

B. In normal mode, the disk quota of the ADOM is fixed and cannot be modified, but in advance mode, the disk quota of the ADOM is flexible because new devices are added to the ADOM.

C. Normal mode is the default ADOM mode.

D. In an advanced mode ADOM. you can assign FortiGate VDOMs from a single FortiGate device to multiple FortiAnalyzer ADOMs.

正解：C,D 解答を投票する

出題：3

Consider the CLI command:

What is the purpose of the command?

A. To add the MD5 hash value and authentication code

B. To encrypt log communications

C. To add a log file checksum

D. To add a unique tag to each log to prove that it came from this FortiAnalyzer

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Refer to the exhibit.

Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin", and coming from Laptop1.
Which filter will achieve the desired result?

A. operation-login & performed_on=="GUI(10.1.1.210)" & user!=admin

B. operation-login & dstip==10.1.1.210 & user!-admin

C. operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin

D. operation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin

正解：D 解答を投票する

出題：5

What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

A. Run execute format disk to format and restart the FortiAnalyzer device.

B. There is no need to do anything because the disk will self-recover.

C. Shut down FortiAnalyzer and replace the disk

D. Hot swap the disk.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

What can you do on FortiAnalyzer to restrict administrative access from specific locations?

A. Enable geo-location services on accessible interface.

B. Configure an ADOM for respective location.

C. Configure trusted hosts for that administrator.

D. Configure two-factor authentication with a remote RADIUS server.

正解：C 解答を投票する

出題：7

What are two effects of enabling auto-cache in a FortiAnalyzer report? (Choose two.)

A. FortiAnalyzer local cache is used to store generated reports.

B. The generation time for reports is decreased.

C. The size of newly generated reports is optimized to conserve disk space.

D. When new logs are received, the hard-cache data is updated automatically.

正解：B,D 解答を投票する

出題：8

What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?
(Choose two.)

A. SFTP, FTP, or SCP server

B. Output profile

C. Report scheduling

D. Mail server

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

An administrator has configured the following settings:
config system fortiview settings
set resolve-ip enable
end
What is the significance of executing this command?

A. It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

B. It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.

C. Use this command only if the source IP addresses are not resolved on FortiGate.

D. You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.

正解：C 解答を投票する

出題：10

What is the purpose of using prefilters when configuring event handlers?

A. They can filter the logs before they are processed by FortiAnalyzer

B. They limit which logs are checked for matches by the other filters.

C. They download new filters to be used in event handlers.

D. They are common filters applied simultaneously to all event handlers.

正解：C 解答を投票する

NSE5_FAZ-7.2試験無料問題集「Fortinet NSE 5 - FortiAnalyzer 7.2 Analyst 認定」