Fortinet NSE5_FAZ-7.0 - Fortinet NSE 5 - FortiAnalyzer 7.0 Exam
Page: 3 / 7
Total 35 questions
Question #11 (Topic: Topic 1)
When working with FortiAnalyzer reports, what is the purpose of a dataset?
A. To set the data included in templates
B. To retrieve data from the database
C. To provide the layout used for reports
D. To define the chart type to be used
Answer: B
Question #12 (Topic: Topic 1)
Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)
A. Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.
B. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end.
C. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version.
D. Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device.
Answer: BD
Question #13 (Topic: Topic 1)
Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)
A. By deploying different FortiAnalyzer devices in both modes, you can improve their overall performance.
B. When in collector mode. FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.
C. When in collector mode. FortiAnalyzer supports event management and reporting features.
D. Collector mode is the default operating mode.
Answer: BD
Question #14 (Topic: Topic 1)
Which statement is true about sending notifications with incident updates?
A. You can send notifications to multiple external platforms.
B. If you use multiple fabric connectors, all connectors must have the same notification settings.
C. Notifications can be sent only by email.
D. Notifications can be sent only when an incident is updated or deleted.
Answer: A
Question #15 (Topic: Topic 1)
Which SQL query is in the correct order to query the database in the FortiAnalyzer?
A. SELECT devid WHERE 'user'='USER1' FROM $log GROUP BY devid
B. FROM $log WHERE 'user'='USER1' SELECT devid GROUP BY devid
C. SELECT devid FROM $log WHERE 'user'='USER1' GROUP BY devid
D. SELECT devid FROM $log GROUP BY devid WHERE 'user'='USER1'
Answer: C
