NSE5_FAZ-7.2 Fortinet Exam Questions and Free Practice Test

Question 19

You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

A. FortiAnalyzer uses log fetching to retrieve the logs when back online

B. FortiGate uses the miglogd process to cache the logs

C. The logfiled process stores logs in offline mode

D. Logs are dropped

Correct Answer:B
NSE5_FAZ-7.2 dumps exhibit

Question 20

Which two statements are correct regarding the export and import of playbooks? (Choose two.)

A. You can export only one playbook at a time.

B. You can import a playbook even if there is another one with the same name in the destination.

C. Playbooks can be exported and imported only within the same FortiAnaryzer.

D. A playbook that was disabled when it was exported, will be disabled when it is imported.

Correct Answer:BD
If the imported playbook has the same name as an existing one, FortiAnalyzer will create a new name that includes a timestamp to avoid conflicts.
Playbooks are imported with the same status they had (enabled or disabled) when they were exported. Playbooks set to run automatically should be exported while they are disabled to avoid unintended runs on the destination.

Question 21

An administrator has moved FortiGate A from the root ADOM to ADOM1. Which two statements are true regarding logs? (Choose two.)

A. Analytics logs will be moved to ADOM1 from the root ADOM automatically.

B. Archived logs will be moved to ADOM1 from the root ADOM automatically.

C. Logs will be presented in both ADOMs immediately after the move.

D. Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the ADOM1 SQL database.

Correct Answer:BD

Question 22

Consider the CLI command:
NSE5_FAZ-7.2 dumps exhibit
What is the purpose of the command?

A. To add a unique tag to each log to prove that it came from this FortiAnalyzer

B. To add the MD5 hash value and authentication code

C. To add a log file checksum

D. To encrypt log communications

Correct Answer:C
https://docs.fortinet.com/document/fortianalyzer/6.2.5/cli-reference/849211/global

Question 23

Which statement about sending notifications with incident updates is true?

A. Notifications can be sent only when an incident is created or deleted.

B. You must configure an output profile to send notifications by email.

C. Each incident can send notifications to a single external platform.

D. Each connector used can have different notification settings.

Correct Answer:D

Question 24

By default, what happens when a log file reaches its maximum file size?

A. FortiAnalyzer overwrites the log files.

B. FortiAnalyzer stops logging.

C. FortiAnalyzer rolls the active log by renaming the file.

D. FortiAnalyzer forwards logs to syslog.

Correct Answer:C

START NSE5_FAZ-7.2 EXAM