QUESTION: 69

Which two purposes does the auto cache setting on reports serve? (Choose two.)

It automatically updates the hcache when new logs arrive.
It provides diagnostics on report generation time.
It reduces the log insert lag rate.
It reduces report generation time.

Answer(s): A,D

Reference:

https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/384416/how-auto- cache-works https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/86926/enabling-auto- cache

Reveal Solution Next Question

QUESTION: 70

What are offline logs on FortiAnalyzer?

Compressed logs, which are also known as archive logs, are considered to be offline logs.
When you restart FortiAnalyzer. all stored logs are considered to be offline logs.
Logs that are indexed and stored in the SQL database.
Logs that are collected from offline devices after they boot up.

Answer(s): A

Reference:

https://help.fortinet.com/fa/faz50hlp/56/5-6- 6/Content/FortiAnalyzer_Admin_Guide/0300_Key_concepts/0600_Log_Storage/0400_Archive_anal ytics_logs.htm

Logs are received and saved in a log file on the FortiAnalyzer disks. Eventually, when the log file reaches a configured size, or at a set schedule, it is rolled over by being renamed. These files (rolled or otherwise) are known as archive logs and are considered offline so they don't offer immediate analytic support. Combined, they count toward the archive quota and retention limits, and they are deleted based on the ADOM data policy. FortiAnalyzer_7.0_Study_Guide-Online page 140

Reveal Solution Next Question

QUESTION: 71

Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with the same FortiAnalyzer devices at the other end.
Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware version.
Log fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for redundancy.
Log fetching allows the administrator to run queries and reports against historical data by retrieving archived logs from one FortiAnalyzer device and sending them to another FortiAnalyzer device.

Answer(s): B,D

Reference:

https://docs.fortinet.com/document/fortianalyzer/7.0.1/administration- guide/651442/fetcher-management Using FortiAnalyzer, you can enable log fetching. This allows FortiAnalyzer to fetch the archived logs of specified devices from another FortiAnalyzer, which you can then run queries or reports on for forensic analysis.

The FortiAnalyzer device that fetches logs operates as the fetch client, and the other FortiAnalyzer device that sends logs operates as the fetch server. Log fetching can happen only between two FortiAnalyzer devices, and both of them must be running the same firmware version. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with different FortiAnalyzer devices at the other end.

FortiAnalyzer_7.0_Study_Guide-Online pag. 168

Reveal Solution Next Question

QUESTION: 72

An administrator has configured the following settings:

config system fortiview settings set resolve-ip enable end

What is the significance of executing this command?

Use this command only if the source IP addresses are not resolved on FortiGate.
It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.
You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.
It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.

Answer(s): D

Reference:

https://community.fortinet.com/t5/Fortinet-Forum/Hostnames-in-FortiAnalyzer/m- p/95351?m=156950

Reveal Solution Next Question

Free NSE5_FAZ-7.2 Exam Braindumps (page: 18)

QUESTION: 69

Reference:

QUESTION: 70

Reference:

QUESTION: 71

Reference:

QUESTION: 72

Reference: