NSE5_FAZ-5.4

Review 25 NSE5-FAZ-5-4 practice questions with answer explanations and community insights.

Question 1

On FortiAnalyzer, what is a wildcard administrator account?

  1. An account that permits access to members of a LDAP group
  2. An account that allows guest access with read-only privileges
  3. An account that requires two-factor authentication
  4. An account that validates against any user account on a FortiAuthenticator

Question 2

Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

  1. Log forwarding in aggregation mode
  2. Log upload
  3. Log fetching
  4. Indicators of Compromise

Question 3

How does FortiAnalyzer retrieve specific log data from the database?

  1. SQL FROM statement
  2. SQL GET statement
  3. SQL SELECT statement
  4. SQL EXTRACT statement

Question 4

Logs are being deleted from one of your ADOMs earlier than the configured setting for archiving in your data policy. What is the most likely problem?

  1. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device
  2. CPU resources are too high
  3. The ADOM disk quota is set too low based on log rates
  4. The total disk space is insufficient and you need to add other disk

Question 5

How do you restrict an administrator's access to a subset of your organization's ADOMs?

  1. Set the ADOM mode to Advanced
  2. Configure trusted hosts
  3. Assign the ADOMs to the administrator's account
  4. Assign the default Super_User administrator profile