Fortinet NSE5_FAZ-7.2 - NSE 5 – FortiAnalyzer 7.2 Analyst Exam
Page: 3 / 10
Total 46 questions
Question #11 (Topic: Exam A)
Which log will generate an event with the status Contained?
A. An IPS log with action=pass.
B. AWebFilter log with action=dropped.
C. An AV log with action=quarantine.
D. An AppControl log with action=blocked.
Answer: C
Question #12 (Topic: Exam A)
What is the purpose of trigger variables?
A. To display statistics about the playbook runtime
B. To use information from the trigger to filter the action in a task
C. To provide the trigger information to make the playbook start running
D. To store the start times of playbooks with On_Schedule triggers
Answer: B
Question #13 (Topic: Exam A)
Refer to the exhibit.
What is the purpose of using the Chart Builder feature on FortiAnalyzer?
What is the purpose of using the Chart Builder feature on FortiAnalyzer?
A. To add a new chart under FortiView to be used in new reports
B. To build a dataset and chart automatically, based on the filtered search results
C. To add charts directly to generate reports in the current ADOM
D. To build a chart automatically based on the top 100 log entries
Answer: B
Question #14 (Topic: Exam A)
What are two effects of enabling auto-cache in a FortiAnalyzer report? (Choose two.)
A. The size of newly generated reports is optimized to conserve disk space.
B. FortiAnalyzer local cache is used to store generated reports.
C. When new logs are received, the hard-cache data is updated automatically.
D. The generation time for reports is decreased.
Answer: CD
Question #15 (Topic: Exam A)
Which statement about sending notifications with incident updates is true?
A. Notifications can be sent only when an incident is created or deleted.
B. You must configure an output profile to send notifications by email.
C. Each incident can send notifications to a single external platform.
D. Each connector used can have different notification settings.
Answer: D
