Free Fortinet NSE 6 – FortiAnalyzer 7.2 Administrator Exam NSE6_FAZ-7.2 Exam Practice Test

You finished registering a FortiGate device. After traffic starts to flow through FortiGate. you notice that only some of the logs expected are being received on FortiAnalyzer.What could be the reason for the logs not arriving on FortiAnalyzer?

• FortiGate does not have logging configured correctly.
• This FortiGate model is not fully supported.
• This FortiGate is part of an HA cluster but it is the secondary device.
• FortiGate was added to the wrong ADOM type.

What are analytics logs on FortiAnalyzer?

• Logs that are compressed and saved to a log file
• Logs that roll over when the log file reaches a specific size
• Logs that are indexed and stored in the SQL
• Logs classified as type Traffic, or type Security

Which two statements are true regarding FortiAnalyzer system backups? (Choose two.)

• Existing reports can be included in the backup files.
• The system reserves at least 5% to 20% disk space for backup files.
• Scheduled system backups can be configured only from the CLI.
• Backup files can be uploaded to SCP and SFTP servers.

Which statement is true about using aggregation mode on FortiAnalyzer?

• Aggregation mode supports log filters.
• Aggregation mode can work with syslog servers.
• In aggregation mode, logs and content files are forwarded in real time.
• Aggregation mode can be configured only on the CLI.

Which statement is true about ADOMs?

• When a FortiAnalyzer Fabric is implemented, the default ADOM mode is set to advanced.
• A fabric ADOM can include all the device types supported by FortiAnalyzer.
• You can change the ADOM mode only through the GUI.
• In normal mode, you cannot change the disk quota of the ADOM after its creation.

Which two statements about FortiAnalyzer operating modes are true? (Choose two.)

• When in collector mode. FortiAnalyzer ofloads the log receiving task to the analyzer.
• Analyzer mode is the default operating mode.
• For the collector, you should allocate most of the disk space to analytics logs.
• When in analyzer mode. FortiAnalyzer supports event management and reporting features.

Which process caches logs on FortiGate when FortiAnalyzer is not readable?

• logfiled
• sqlplugind
• miglogd
• oftpd

After you have moved a registered logging device out of one ADOM and into a new ADOM, you run the following command: execute sql-local rebuild-adom <new-ADOM-name>What is the purpose of running this CLI command?

• To reset the ADOM disk quota enforcement to its default value
• To migrate the archive logs to the new ADOM
• To populate the new ADOM with analytical logs for the moved device, so you can run reports
• To remove the analytics logs of the device from the old database

An administrator, fortinet, can view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create a mail server that can be used to send alert emails.What can be the problem?

• ADOM mode is configured with Advanced mode.
• fortinet is assigned the Standard_User administrative profile.
• A trusted host is configured.
• fortinet is assigned Restricted_User administrative profile.

In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?

• The traffic destination is another FoitiGate in the fabric.
• Log redundancy is configured in the fabric.
• The upstream FortiGate is configured to do NAT.
• The downstream device cannot connect to FortiAnalyzer.