New update Lead4Pass NSE5_FAZ-6.4 Dumps with PDF and VCE| Fortinet NSE 5 – FortiAnalyzer 6.4 Exam

November 1, 2022

New updated Lead4Pass NSE5_FAZ-6.4 Dumps with PDF file and VCE practice exam engine to help pass the Fortinet NSE 5 – FortiAnalyzer 6.4 Exam successfully!

Lead4Pass NSE5_FAZ-6.4 exam dumps contain 58 exam questions and answers, covering complete Fortinet NSE 5 – FortiAnalyzer 6.4 certification exam questions, and verified to be true and valid, check here to get the latest Lead4Pass NSE5_FAZ-6.4 dumps: (PDF+VCE).

Check out the NSE5_FAZ-6.4 PDF exam questions and answers shared for free:

Also, read the latest 15 Lead4Pass NSE5_FAZ-6.4 exam questions and answers online:

Question 1:

What is the purpose of a predefined template on the FortiAnalyzer?

A. It can be edited and modified as required

B. It specifies the report layout which contains predefined texts, charts, and macros

C. It specifies report settings which contains time period, device selection, and schedule

D. It contains predefined data to generate mock reports


Correct Answer: B

Question 2:


What FortiGate process caches logs when FortiAnalyzer is not reachable?

A. logfiled

B. sqlplugind

C. oftpd

D. miglogd


Correct Answer: D


Question 3:


View the exhibit:

new NSE5_FAZ-6.4 dumps questions 3

What does the 1000MB maximum for disk utilization refer to?

A. The disk quota for the FortiAnalyzer model

B. The disk quota for all devices in the ADOM

C. The disk quota for each device in the ADOM

D. The disk quota for the ADOM type


Correct Answer: B

Question 4:


If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the

FortiAnalyzer is back to functioning normally, without losing data?

A. Hot swap the disk

B. Replace the disk and rebuild the RAID manually

C. Take no action if the RAID level supports a failed disk

D. Shut down FortiAnalyzer and replace the disk


Correct Answer: D 2FFortiManager%20devices%20that,to%20exchanging%20the%20hard%20disk.

If a hard disk on a FortiAnalyzer unit fails, it must be replaced. On FortiAnalyzer devices that support hardware RAID, the hard disk can be replaced while the unit is still running ?known as hot swapping. On FortiAnalyzer units with software RAID, the device must be shutdown prior to exchanging the hard disk.

Reference:,process% 20know n%20as%20hot%20swapping

Question 5:


Which two statements express the advantages of grouping similar reports? (Choose two.)

A. Improve report completion time.

B. Conserve disk space on FortiAnalyzer by grouping multiple similar reports.

C. Reduce the number of hcache tables and improve auto-hcache completion time.

D. Provides a better summary of reports.


Correct Answer: AC

Question 6:


Logs are being deleted from one of the ADOMs earlier than the configured setting for archiving in the data policy.

What is the most likely problem?

A. CPU resources are too high

B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device

C. The total disk space is insufficient and you need to add other disk

D. The ADOM disk quota is set too low, based on log rates


Correct Answer: D


Question 7:


You\’ve moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

A. FortiAnalyzer resets the disk quota of the new ADOM to default.

B. FortiAnalyzer migrates archive logs to the new ADOM.

C. FortiAnalyzer migrates analytics logs to the new ADOM.

D. FortiAnalyzer removes logs from the old ADOM.


Correct Answer: C

Question 8:


Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)

A. Mail server

B. Output profile

C. SFTP server

D. Report scheduling


Correct Answer: AB


Question 9:


By default, what happens when a log file reaches its maximum file size?

A. FortiAnalyzer overwrites the log files.

B. FortiAnalyzer stops logging.

C. FortiAnalyzer rolls the active log by renaming the file.

D. FortiAnalyzer forwards logs to Syslog.


Correct Answer: C

Question 10:


For which two purposes would you use the command set log checksum? (Choose two.)

A. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server

B. To prevent log modification or tampering

C. To encrypt log communications

D. To send an identical set of logs to a second logging server


Correct Answer: AB

Question 11:


Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?






Correct Answer: A

Question 12:


You need to upgrade your FortiAnalyzer firmware.

What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

A. FortiAnalyzer uses log fetching to retrieve the logs when back online

B. FortiGate uses the miglogd process to cache the logs

C. The logfile process stores logs in offline mode

D. Logs are dropped


Correct Answer: B


Question 13:


Which tabs do not appear when FortiAnalyzer is operating in Collector mode?

A. FortiView

B. Event Management

C. Device Manger

D. Reporting


Correct Answer: B

Question 14:


An administrator has moved FortiGate A from the root ADOM to ADOM1. Which two statements are true regarding logs? (Choose two.)

A. Analytics logs will be moved to ADOM1 from the root ADOM automatically.

B. Archived logs will be moved to ADOM1 from the root ADOM automatically.

C. Logs will be presented in both ADOMs immediately after the move.

D. Analytics logs will be moved to ADOM1 from the root ADOM after you rebuild the ADOM1 SQL database.


Correct Answer: BD


Question 15:


Refer to the exhibit.

new NSE5_FAZ-6.4 dumps questions 15

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

A. Report size will be optimized to conserve disk space on FortiAnalyzer.

B. Reports will be cached in the memory.

C. This feature is automatically enabled for scheduled reports.

D. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.


Correct Answer: CD



Latest Complete 58 NSE5_FAZ-6.4 Certification Exam Questions With Answers Get Lead4Pass NSE5_FAZ-6.4 Exam Dumps: (PDF+VCE)