Fortinet NSE5_FAZ-7.2 問題集

質問 1：
An administrator has moved FortiGate A from the root ADOM to ADOM1.
Which two statements are true regarding logs? (Choose two.)
A. Archived logs will be moved to ADOM1 from the root ADOM automatically.
B. Logs will be presented in both ADOMs immediately after the move.
C. Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the ADOM1 SQL database.
D. Analytics logs will be moved to ADOM1 from the root ADOM automatically.
正解：A,C

質問 2：
Which statement about the FortiSIEM management extension is correct?
A. It can be installed as a dedicated VM.
B. Its use of the available disk space is capped at 50%.
C. Allows you to manage the entire life cycle of a threat or breach.
D. It requires a licensed FortiSIEM supervisor.
正解：C

質問 3：
Which SQL query is in the correct order to query the database in the FortiAnslyzer?
A. SELECT devid FROM Slog GROOP BY devid WHERE * user' =* USERl'
B. FROM Slog WHERE 'user* =' USERl' SELECT devid GROUP BY devid
C. SELECT devid FROM Slog- WHERE *user' =' USERl' GROUP BY devid
D. SELECT devid WHERE 'u3er'='USERl' FROM $ log GROUP BY devid
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1.
What should the administrator do to solve this issue?
A. Use the execute sql-local rebuild-adom ADOM1 command to rebuild the ADOM database.
B. Use the execute sql-local rebuild-db command to rebuild all ADOM databases.
C. Use the execute sql-local rebuild-adom root command to rebuild the ADOM database.
D. Use the execute sql-report run ADOM1 command to run a report.
正解：A

質問 5：
Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)
A. SSL can send logs in real-time only.
B. SSL communications are auto-negotiated between the two devices.
C. SSL is the default setting.
D. SSL encryption levels are globally set on FortiAnalyzer.
E. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.
正解：C,D

質問 6：
What purposes does the auto-cache setting on reports serve? (Choose two.)
A. To reduce report generation time
B. To provide diagnostics on report generation time
C. To reduce the log insert lag rate
D. To automatically update the hcache when new logs arrive
正解：A,D

質問 7：
Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)
A. By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting
B. When in collector mode. FortiAnalyzer supports event management and reporting features.
C. When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.
D. Collector mode is the default operating mode.
正解：A,C

質問 8：
If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?
A. Hot swap the disk
B. Shut down FortiAnalyzer and replace the disk
C. Take no action if the RAID level supports a failed disk
D. Replace the disk and rebuild the RAID manually
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Which two statement are true regardless initial Logs sync and Log Data Sync for Ha on FortiAnalyzer?
A. With initial Logs Sync, when you add a unit to an HA cluster, the primary device synchronizes its logs with the backup device.
B. By default, Log Data Sync is disabled on all backup devise.
C. Log Data Sync provides real-time log synchronization to all backup devices.
D. When Logs Data Sync is turned on, the backup device will reboot and then rebuilt the log database with the synchronized logs.
正解：A,D