NSE5_FAZ-7.2 試験問題を無料オンラインアクセス

You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

• A.Logs are dropped
• B.FortiAnalyzer uses log fetching to retrieve the logs when back online
• C.FortiGate uses themiglogdprocess to cache the logs
• D.Thelogfiledprocess stores logs in offline mode

Refer to the exhibit.

The image displays the configuration of a FortiAnalyzer the administrator wants to join to an existing HA cluster.
What can you conclude from the configuration displayed?

• A.This FortiAnalyzer will trigger a failover after losing communication with its peers for 10 seconds.
• B.After joining to the cluster, this FortiAnalyzer will keep an updated log database.
• C.This FortiAnalyzer is configured to receive logs in its port1.
• D.This FortiAnalyzer will join to the existing HA cluster as the primary.

What happens when the IOC breach detection engine on FortiAnalyzer finds web logs that match a blocklisted IP address?

• A.The endpoint is marked as Compromised and. optionally, can be put in quarantine.
• B.A new Infected entry is added for the corresponding endpoint.
• C.The detection engine classifies those logs as Suspicious
• D.FortiAnalyzer flags the associated host for further analysis.

What statements are true regarding disk log quota? (Choose two)

• A.The FortiAnalyzer disk log quota is configurable, but has a minimum o 100mb a maximum based on the reserved system space.
• B.The FortiAnalyzer stops logging once the disk log quota is met.
• C.The FortiAnalyzer automatically sets the disk log quota based on the device.
• D.The FortiAnalyzer can overwrite the oldest logs or stop logging once the disk log quota is met.

Which two methods can you use to send event notifications when an event occurs that matches a configured event handler? (Choose two.)

• A.Email
• B.IM
• C.SMS
• D.SNMP