Online Access Free NSE5_FAZ-7.0 Exam Questions

Which statement is true about sending notifications with incident updates?

• A.If you use multiple fabric connectors, all connectors must have the same notification settings
• B.Notifications can be sent only when an incident is updated or deleted.
• C.You can send notifications to multiple external platforms
• D.Notifications can be sent only by email.

Refer to the exhibits.


How many events will be added to the incident created after running this playbook?

• A.Thirteen events will be added.
• B.Ten events will be added.
• C.Five events will be added.
• D.No events will be added.

Which two actions should an administrator take to view Compromised Hosts on FortiAnalyzer? (Choose two.)

• A.Subscribe FortiAnalyzer to FortiGuard to keep its local threat database up to date.
• B.Enable web filtering in firewall policies on FortiGate devices, and make sure these logs are sent to FortiAnalyzer.
• C.Enable device detection on an interface on the FortiGate devices that are connected to the FortiAnalyzer device.
• D.Make sure all endpoints are reachable by FortiAnalyzer.

FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.
What is the most likely problem?

• A.Disk utilization for archive logs is set for 15 days
• B.CPU resources are too high
• C.Quota enforcement is acting on analytical data before a report is complete
• D.Logs are rolling before the report is run

What remote authentication servers can you configure to validate your FortiAnalyzer administrator logons? (Choose three)

• A.RADIUS
• B.PKI
• C.TACACS+
• D.LDAP
• E.Local