Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE5_FAZ-7.2

Fortinet NSE5_FAZ-7.2 Exam
Fortinet NSE 5 - FortiAnalyzer 7.2 (Page 4 )

Updated On: 12-Feb-2026
Page 4 of 29
PDF with 137 Questions

Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

  1. To properly correlate logs
  2. To use real-time forwarding
  3. To resolve host names
  4. To improve DNS response times

Answer(s): A

Explanation:



You need to upgrade your FortiAnalyzer firmware.

What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

  1. FortiAnalyzer uses log fetching to retrieve the logs when back online
  2. FortiGate uses the miglogd process to cache the logs
  3. The logfiled process stores logs in offline mode
  4. Logs are dropped

Answer(s): B

Explanation:



After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?

execute sql-local rebuild-adom <new-ADOM-name>

  1. To reset the disk quota enforcement to default
  2. To remove the analytics logs of the device from the old database
  3. To migrate the archive logs to the new ADOM
  4. To populate the new ADOM with analytical logs for the moved device, so you can run reports

Answer(s): D

Explanation:



FortiAnalyzer_7.0_Study_Guide-Online.pdf page 128: Are the device analytics logs required for reports in the new ADOM? If so, rebuild the new ADOM database



If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

  1. Hot swap the disk
  2. Replace the disk and rebuild the RAID manually
  3. Take no action if the RAID level supports a failed disk
  4. Shut down FortiAnalyzer and replace the disk

Answer(s): D

Explanation:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD46446#:~:text=On%20FortiAnalyzer%2F FortiManager%20devices%20that,to%20exchanging%20the%20hard%20disk.

If a hard disk on a FortiAnalyzer unit fails, it must be replaced. On FortiAnalyzer devices that support hardware RAID, the hard disk can be replaced while the unit is still running ­ known as hot swapping. On FortiAnalyzer units with software RAID, the device must be shutdown prior to exchanging the hard disk.


Reference:

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-swap-Hard- Disk-on-FortiAnalyzer/ta-
p/194997?externalID=FD41397#:~:text=If%20a%20hard%20disk%20on,process%20known%20as%20 hot%20swapping



If you upgrade the FortiAnalyzer firmware, which report element can be affected?

  1. Custom datasets
  2. Report scheduling
  3. Report settings
  4. Output profiles

Answer(s): A

Explanation:

https://docs.fortinet.com/document/fortianalyzer/6.2.5/upgrade-guide/669300/checking-reports






Post your Comments and Discuss Fortinet NSE5_FAZ-7.2 exam prep with other Community members:

Join the NSE5_FAZ-7.2 Discussion