NSE5_FAZ-7.0 Dumps 2023 – New Fortinet NSE5_FAZ-7.0 Exam Questions [Q39-Q60]

Q39. A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.
What can you do on FortiAnalyzer to accomplish this?

Q40. Refer to the exhibit.

Which statement is correct regarding the event displayed?

Q41. Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

Q42. What statements are true regarding disk log quota? (Choose two)

Q43. In Log View, you can use the Chart Builder feature to build a dataset and chart based on the filtered search results.
Similarly, which feature you can use for FortiView?

Q44. How are logs forwarded when FortiAnalyzer is using aggregation mode?

Q45. Refer to the exhibit.

The exhibit shows “remoteservergroup” is an authentication server group with LDAP and RADIUS servers.
Which two statements express the significance of enabling “Match all users on remote server” when configuring a new administrator? (Choose two.)

Q46. What can the CLI command # diagnose test application oftpd 3 help you to determine?

Q47. Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

Q48. Which two constraints can impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

Q49. If you upgrade your FortiAnalyzer firmware, what report elements can be affected?

Q50. In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

Q51. Which daemon is responsible for enforcing raw log file size?

Q52. Which daemon is responsible for enforcing the log file size?

Q53. What are offline logs on FortiAnalyzer?

Q54. Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

Q55. What two things should an administrator do to view Compromised Hosts on FortiAnalyzer? (Choose two.)

Q56. What purposes does the auto-cache setting on reports serve? (Choose two.)

Q57. An administrator has configured the following settings:
config system fortiview settings
set resolve-ip enable
end
What is the significance of executing this command?

Q58. What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?

Q59. Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Q60. Which two statements are correct regarding the export and import of playbooks? (Choose two.)