Question 1

Which SQL query is in the correct order to query the database in the FortiAnslyzer?

Accepted Answer

FortiAnalyzer_7.0_Study_Guide-Online.pdf page 259: The main clauses FortiAnalyzer reports use are as follows:
•FROM
•WHERE
•GROUP BY
•ORDER BY
• LIMIT
• OFFSET
Accordingly, following the SELECT keyword, the statement must be followed by one or more clauses in the order in which they appear in the table shown on this
slide.

Question 2

What are two benefits of using fabric connectors? (Choose two.)

Accepted Answer

Correct answer: AC

Question 3

What are two of the key features of FortiAnalyzer? (Choose two.)

Accepted Answer

Correct answer: AC

Question 4

Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)

Accepted Answer

Correct answer: BC

Question 5

What are offline logs on FortiAnalyzer?

Accepted Answer

Correct answer: A

Question 6

Which item must you configure on FortiAnalyzer to email generated reports automatically?

Accepted Answer

Correct answer: A

Question 7

Which two purposes does the auto cache setting on reports serve? (Choose two.)

From SurePassExam
https://www.surepassexam.com/NSE5_FAZ-7.2-exam-dumps.html (137 New Questions)

Accepted Answer

Correct answer: AD

Question 8

Which log type does the FortiAnalyzer indicators of compromise feature use to identify infected hosts?

Accepted Answer

Correct answer: B

Question 9

Refer to the exhibit.
Laptop1 is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface
generated by any user other than "admin", and coming from Laptop1.
Which filter will achieve the desired result?

Accepted Answer

Correct answer: D

Question 10

If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

Accepted Answer

https://kb.fortinet.com/kb/documentLink.do?externalID=FD46446#:~:text=On%20FortiAnalyzer%2FFortiMana If a hard disk on a FortiAnalyzer unit fails, it must be
replaced. On FortiAnalyzer devices that support
hardware RAID, the hard disk can be replaced while the unit is still running – known as hot swapping.
On FortiAnalyzer units with software RAID, the device must be shutdown prior to exchanging the hard disk.