Fortinet NSE5_FAZ-7.2 Exam Questions - Real Practice Questions for Guaranteed Success

Question 1

What is the purpose of output variables?

ATo store playbook execution statistics

BTo use the output of the previous task as the input of the current task

CTo display details of the connectors used by a playbook

DTo save all the task settings when a playbook is exported
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 242: Output variables allow you to use the output from a preceding task as an input to the current task.
'Output variables allow you to use the output from a preceding task as an input to the current task.' FortiAnalyzer_7.0_Study_Guide-Online page 242

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ATo store playbook execution statistics

BTo use the output of the previous task as the input of the current task

CTo display details of the connectors used by a playbook

0 / 1500

Question 2

Which two elements are contained in a system backup created on FortiAnalyzer? (Choose two.)

ASystem information

BLogs from registered devices

CReport information

DDatabase snapshot

Correct : A, C

What does the System Configuration backup include?

System information, such as the device IP address and administrative user information.

Device list, such as any devices you configured to allow log access.

Report information, such as any configured report settings, as well as all your custom report details. These are not the actual reports.

FortiAnalyzer_7.0_Study_Guide-Online pag. 29

FortiAnalyzer_7.0_Study_Guide-Online.pdf page 29: What does the System Configuration backup include?

* System information, such as the device IP address and administrative user information

* Device list, such as any devices you configured to allow log access

* Report information, such as any configured report settings, as well as all your custom report details. These are not the actual reports.

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ASystem information

BLogs from registered devices

CReport information

DDatabase snapshot

0 / 1500

Question 3

Which two statements are correct regarding the export and import of playbooks? (Choose two.)

AYou can export only one playbook at a time.

BYou can import a playbook even if there is another one with the same name in the destination.

CPlaybooks can be exported and imported only within the same FortiAnaryzer.

DA playbook that was disabled when it was exported, will be disabled when it is imported.
If the imported playbook has the same name as an existing one, FortiAnalyzer will create a new name that includes a timestamp to avoid conflicts.
Playbooks are imported with the same status they had (enabled or disabled) when they were exported.
Playbooks set to run automatically should be exported while they are disabled to avoid unintended runs on the destination.

Correct : B, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AYou can export only one playbook at a time.

BYou can import a playbook even if there is another one with the same name in the destination.

CPlaybooks can be exported and imported only within the same FortiAnaryzer.

0 / 1500

Question 4

Which SQL query is in the correct order to query the database in the FortiAnslyzer?

ASELECT devid FROM Slog GROOP BY devid WHERE * user' =* USERl'

BSELECT devid WHERE 'u3er'='USERl' FROM $ log GROUP BY devid

CSELECT devid FROM Slog- WHERE *user' =' USERl' GROUP BY devid

DFROM Slog WHERE 'user* =' USERl' SELECT devid GROUP BY devid

Correct : C

FortiAnalyzer_7.0_Study_Guide-Online.pdf page 259: The main clauses FortiAnalyzer reports use are as follows:

*FROM

*WHERE

*GROUP BY

*ORDER BY

* LIMIT

* OFFSET

Accordingly, following the SELECT keyword, the statement must be followed by one or more clauses in the order in which they appear in the table shown on this slide.

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ASELECT devid FROM Slog GROOP BY devid WHERE * user' =* USERl'

BSELECT devid WHERE 'u3er'='USERl' FROM $ log GROUP BY devid

CSELECT devid FROM Slog- WHERE *user' =' USERl' GROUP BY devid

DFROM Slog WHERE 'user* =' USERl' SELECT devid GROUP BY devid

0 / 1500

Question 5

Which log will generate an event with the status Contained?

AAn IPS log with action=pass.

BA WebFilter log with action=dropped.

CAn AV log with action=quarantine.

DAn AppControl log with action=blocked.

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AAn IPS log with action=pass.

BA WebFilter log with action=dropped.

CAn AV log with action=quarantine.

DAn AppControl log with action=blocked.

0 / 1500

Master Fortinet NSE5_FAZ-7.2 Exam with Reliable Practice Questions

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: