NSE5_FAZ-7.2 Practice Online

Question 1

Which two statements are true regarding the outbreak detection service? (Choose two.)

A : New alerts are received by email.

B : Outbreak alerts are available on the root ADOM only.

C : An additional license is required.

D : It automatically downloads new event handlers and reports.

Answer: C,D

Question 2

What is Log Insert Lag Time on FortiAnalyzer?

A : The number of times in the logs where end users experienced slowness while accessing resources.

B : The amount of lag time that occurs when the administrator is rebuilding the ADOM database.

C :

The amount of time that passes between the time a log was received and when it was indexed on FortiAnalyzer

D : The amount of time FortiAnalyzer takes to receive logs from a registered device

Answer: C

Question 3

What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?

A : Hot swap the disk.

B : There is no need to do anything because the disk will self-recover.

C : Run execute format disk to format and restart the FortiAnalyzer device.

D : Shut down FortiAnalyzer and replace the disk

Answer: A

Question 4

What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server? (Choose two.)

A : SFTP, FTP, or SCP server

B : Mail server

C : Output profile

D : Report scheduling

Answer: A,C

Question 5

Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

A : Antivirus logs

B : Web filter logs

C : IPS logs

D : Application control logs

Answer: B

Name:	Fortinet NSE 5 - FortiAnalyzer 7.2 Analyst
Exam Code:	NSE5_FAZ-7.2
Certification:	NSE 5 Network Security Analyst
Vendor:	Fortinet
Total Questions:	138
Last Updated:	Jul 03, 2024