NSE5_FAZ-7.2 Fortinet Exam Questions and Free Practice Test

Question 37

Which daemon is responsible for enforcing raw log file size?

A. logfiled

B. oftpd

C. sqlplugind

D. miglogd

Correct Answer:A

Question 38

Which statement about the FortiSOAR management extension is correct?

A. It requires a FortiManager configured to manage FortiGate

B. It requires a dedicated FortiSOAR device or VM.

C. It does not include a limited trial by default.

D. It runs as a docker container on FortiAnalyzer

Correct Answer:D

Question 39

What is the purpose of using prefilters when configuring event handlers?

A. They limit which logs are checked for matches by the other filters.

B. They can filter the logs before they are processed by FortiAnalyzer

C. They download new filters to be used in event handlers.

D. They are common filters applied simultaneously to all event handlers.

Correct Answer:A

Question 40

Refer to the exhibit.
NSE5_FAZ-7.2 dumps exhibit
Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1:
Which filter will achieve the desired result?

A. operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin

B. operation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin

C. operation-login & dstip==10.1.1.210 & userl-admin

D. operation-login & performed_on=="GUI(10.1.1.210)' & user!=admin

Correct Answer:A
On there the task was to create a filter for failed logins from any other location but the local computer: "Add the text performed_on!~10.0.1.10. This includes any attempts coming from devices with an IP address that is not the one configured on the Local-Client computer."

START NSE5_FAZ-7.2 EXAM