Fortinet NSE5_FAZ-7.2 Exam Practice Test Instant Access

Question 1

What happens when the IOC breach detection engine on FortiAnalyzer finds web logs that match a blocklisted IP address?

AThe endpoint is marked as Compromised and. optionally, can be put in quarantine.

BFortiAnalyzer flags the associated host for further analysis.

CA new Infected entry is added for the corresponding endpoint.

DThe detection engine classifies those logs as Suspicious

Answer : A

Question 2

Why run the command diagnose sql status sqlplugind?

ATo list the current SQL processes running

BTo check what is the database log insertion status

CTo display the SOL query connections and hcache status

DTo view the current hcache size

Answer : C

Question 3

Which statement about the FortiSOAR management extension is correct?

AIt requires a FortiManager configured to manage FortiGate

BIt requires a dedicated FortiSOAR device or VM.

CIt does not include a limited trial by default.

DIt runs as a docker container on FortiAnalyzer

Answer : D

Question 4

Which item must you configure on FortiAnalyzer to email generated reports automatically?

AOutput profile

BReport scheduling

CSFTP server

DSNMP server

Answer : A

Question 5

Which statement describes online logs on FortiAnalyzer?

ALogs that reached a specific size and were rolled over

BLogs that can be used to create reports

CLogs that can be viewed using Log Browse

DLogs that are saved to disk, compressed, and available in FortiView

Answer : C

Question 6

What are analytics logs on FortiAnalyzer?

ALog type Traffic logs.

BLogs that roll over when the log file reaches a specific size.

CLogs that are indexed and stored in the SQL.

DRaw logs that are compressed and saved to a log file.

Answer : C

Question 7

Which two statements express the advantages of grouping similar reports? (Choose two.)

Fortinet NSE5_FAZ-7.2 Fortinet NSE 5 - FortiAnalyzer 7.2 Exam Practice Test