Fortinet NSE5_FAZ-6.2 - Fortinet NSE 5 - FortiAnalyzer 6.2 Exam
Page: 3 / 8
Total 39 questions
Question #11 (Topic: Topic 1)
After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?
execute sql-local rebuild-adom <new-ADOM-name>
execute sql-local rebuild-adom <new-ADOM-name>
A. To reset the disk quota enforcement to default
B. To remove the analytics logs of the device from the old database
C. To migrate the archive logs to the new ADOM
D. To populate the new ADOM with analytical logs for the moved device, so you can run reports
Answer: B
Question #12 (Topic: Topic 1)
If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?
A. Hot swap the disk
B. Replace the disk and rebuild the RAID manually
C. Take no action if the RAID level supports a failed disk
D. Shut down FortiAnalyzer and replace the disk
Answer: B
Question #13 (Topic: Topic 1)
Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe, from another FortiAnalyzer device?
A. Log fetching
B. Indicators of compromise
C. Log forwarding in aggregation mode
D. Log upload
Answer: A
Question #14 (Topic: Topic 1)
If you upgrade the FortiAnalyzer firmware, which report element can be affected?
A. Custom datasets
B. Report scheduling
C. Report settings
D. Output profiles
Answer: A
Question #15 (Topic: Topic 1)
FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.
What is the most likely problem?
What is the most likely problem?
A. Quota enforcement is acting on analytical data before a report is complete
B. Logs are rolling before the report is run
C. CPU resources are too high
D. Disk utilization for archive logs is set for 15 days
Answer: A
