Fortinet NSE5_FAZ-7.2 Practice Questions| TestInsights

Question 1

Refer to the exhibit.

NSE5_FAZ-7.2 Exam Question 1 Exhibit 1

Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1:

Which filter will achieve the desired result?

Aoperation-login & performed_on=='GUI(10.1.1.100)' & user!=admin

Boperation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin

Coperation-login & dstip==10.1.1.210 & userl-admin

Doperation-login & performed_on=='GUI(10.1.1.210)' & user!=admin

Correct : A

On there the task was to create a filter for failed logins from any other location but the local computer: 'Add the text performed_on!~10.0.1.10. This includes any attempts coming from devices with an IP address that is not the one configured on the Local-Client computer.'

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

Aoperation-login & performed_on=='GUI(10.1.1.100)' & user!=admin

Boperation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin

Coperation-login & dstip==10.1.1.210 & userl-admin

Doperation-login & performed_on=='GUI(10.1.1.210)' & user!=admin

Question 2

A play book contains five tasks in total. An administrator executed the playbook and four out of five tasks finished successfully, but one task failed. What will be the status of the playbook after its execution?

ASuccess

BFailed

CRunning

DUpstream_failed

Correct : B

Playbook jobs that include one or more failed tasks are labeled as Failed in Playbook Monitor. FortiAnalyzer_7.0_Study Guide page No: 247

Playbook jobs that include one or more failed tasks are labeled as Failed in Playbook Monitor. A failed status, however, does not mean that all tasks failed. Some individual actions may have been completed successfully.

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ASuccess

BFailed

CRunning

DUpstream_failed

Question 3

Which two statements are true regarding the outbreak detection service? (Choose two.)

ANew alerts are received by email.

BOutbreak alerts are available on the root ADOM only.

CAn additional license is required.

DIt automatically downloads new event handlers and reports.

Correct : C, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ANew alerts are received by email.

BOutbreak alerts are available on the root ADOM only.

CAn additional license is required.

DIt automatically downloads new event handlers and reports.

Question 4

What are two effects of enabling auto-cache in a FortiAnalyzer report? (Choose two.)

AThe size of newly generated reports is optimized to conserve disk space.

BFortiAnalyzer local cache is used to store generated reports.

CWhen new logs are received, the hard-cache data is updated automatically.

DThe generation time for reports is decreased.

Correct : C, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe size of newly generated reports is optimized to conserve disk space.

BFortiAnalyzer local cache is used to store generated reports.

CWhen new logs are received, the hard-cache data is updated automatically.

DThe generation time for reports is decreased.

Question 5

What are two benefits of using fabric connectors? (Choose two.)

AThey allow FortiAnalyzer to send logs in real-time to public cloud accounts.

BYou do not need an additional license to send logs to the cloud platform.

CFabric connectors allow you to improve redundancy.

DUsing fabric connectors is more efficient than using third-party polling with API.

Correct : A, C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThey allow FortiAnalyzer to send logs in real-time to public cloud accounts.

BYou do not need an additional license to send logs to the cloud platform.

CFabric connectors allow you to improve redundancy.

DUsing fabric connectors is more efficient than using third-party polling with API.

Curious about Actual Fortinet Certified Professional (NSE5_FAZ-7.2) Exam Questions?

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: