Fortinet NSE5_FAZ-7.2 Quiz 1 Topic 4 Questions 1-5

Question: 1

What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

ARADIUS

BLocal

CLDAP

DPKI

ETACACS+

Show Answer

Question: 2

Refer to the exhibit.

q2_NSE5_FAZ-7.2

Which statement is correct regarding the event displayed?

AThe security risk was blocked or dropped.

BThe security event risk is considered open.

CAn incident was created from this event.

DThe risk source is isolated.

Show Answer

Question: 3

Which two statements are true regarding fabric connectors? (Choose two.)

AConfiguring fabric connectors to send notification to ITSM platform upon incident creation Is more efficient than third-party information from the FortiAnalyzer API.

BFabric connectors allow to save storage costs and improve redundancy.

CStorage connector service does not require a separate license to send logs to cloud platform.

DCloud-Out connections allow you to send real-time logs to pubic cloud accounts like Amazon S3, Azure Blob , and Google Cloud.

Show Answer

Question: 4

What can you do on FortiAnalyzer to restrict administrative access from specific locations?

AConfigure trusted hosts for that administrator.

BEnable geo-location services on accessible interface.

CConfigure two-factor authentication with a remote RADIUS server.

DConfigure an ADOM for respective location.

Show Answer

Question: 5

Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

AFortiView

BEvent Management

CDevice Manger

DReporting

Show Answer

Fortinet NSE5_FAZ-7.2 Quiz:1 Topic:4 Questions:1-5