Fortinet NSE5_FAZ-6.4 問題集

質問 1：
Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?
A. This feature allows you to build a chart under FortiView.
B. In Log View, this feature allows you to build a chart and chart automatically, on the top 100 log entries.
C. In Log View, this feature allows you to build a dataset and chart automatically, based on the filtered search results.
D. You can add charts to generated reports using this feature.
正解：C

質問 2：
Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)
A. Once enabled, the Device Manager, FortiView, Event Management, and Reports tab display per ADOM.
B. All administrators can create ADOMs--not just the admin administrator.
C. ADOMs are enabled by default.
D. ADOMs constrain other administrator's access privileges to a subset of devices in the device list.
正解：A,D

質問 3：
The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device.
What can be the reason for this failure?
A. ADOMs are not enabled on FortiAnalyzer.
B. ADOM mode should be set to advanced, in order to register the FortiClient EMS device.
C. A separate license is required on FortiAnalyzer in order to register the FortiClient EMS device.
D. FortiAnalyzer is in an HA cluster.
正解：A

質問 4：
Which two statements express the advantages of grouping similar reports? (Choose two.)
A. Conserve disk space on FortiAnalyzer by grouping multiple similar reports.
B. Reduce the number of hcache tables and improve auto-hcache completion time.
C. Improve report completion time.
D. Provides a better summary of reports.
正解：B,C

質問 5：
FortiAnalyzer centralizes which functions? (Choose three)
A. Graphical reporting
B. Security log analysis / forensics
C. Content archiving / data mining
D. Vulnerability assessment
E. Network analysis
正解：A,B,C

質問 6：
You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?
A. FortiAnalyzer migrates archive logs to the new ADOM.
B. FortiAnalyzer removes logs from the old ADOM.
C. FortiAnalyzer resets the disk quota of the new ADOM to default.
D. FortiAnalyzer migrates analytics logs to the new ADOM.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
What can the CLI command # diagnose test application oftpd 3 help you to determine?
A. What ADOMs are enabled and configured
B. What logs, if any, are reaching FortiAnalyzer
C. What devices are registered and unregistered
D. What devices and IP addresses are connecting to FortiAnalyzer
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
What two things should an administrator do to view Compromised Hosts on FortiAnalyzer? (Choose two.)
A. Subscribe FortiAnalyzer to FortiGuard to keep its local threat database up-to-date.
B. Enable web filtering in firewall policies on FortiGate devices, and make sure these logs are sent to FortiAnalyzer.
C. Make sure all endpoints are reachable by FortiAnalyzer.
D. Enable device detection on an interface on the FortiGate devices that are connected to the FortiAnalyzer.
正解：A,D

質問 9：
You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed.
What is the recommended method to replace the disk?
A. Perform a hot swap
B. Shut down FortiAnalyzer and then replace the disk
C. Downgrade your RAID level, replace the disk, and then upgrade your RAID level
D. Clear all RAID alarms and replace the disk while FortiAnalyzer is still running
正解：B
解説: (Topexam メンバーにのみ表示されます)