NSE6 FAZ_7.2 Administrator

NO.1 Which two methods can you use to restrict administrative access on FortiAnalyzer? (Choose two.)

• A. Use administrator profiles.

• B. Configure trusted hosts.

• C. Fabric connectors to external LDAP servers.

• D. Limit access to specific virtual domains

NO.2 Which statement is true about ADOMs?

• A. When a FortiAnalyzer Fabric is implemented, the default ADOM mode is set to advanced
  

• B. A fabric ADOM can include all the device types supported by FortiAnalyzer.
  

• C. You can change the ADOM mode only through the GUI
  

• D. In normal mode, you cannot change the disk quota of the ADOM after its creation.
  

NO.3 Which two of the available registration methods place the device automatically in its assigned ADOM?

(Choose two.)

• A. Request from the device
  

• B. Serial number

  
  

• C. Fabric Authorization

  
  

• D. Pre-shared key

  
  

  
  

NO.4 Which statement is true about the communication between FortiGate high availability (HA) clusters and FortiAnalyzer?

• A. Each cluster member sends its logs directly to FortiAnalyzer.

  
  

• B. You must add the device lo the cluster first, and thenregistersthe cluster with FortiAnalyzer.

  
  

• C. FortiAnalyzer distinguishes each cluster member by its MAC address.

  
  

• D. Only the primary device in the cluster communicates with FortiAnalyzer.

  
  

NO.5 Refer to the exhibit.

Based on the partial outputs displayed in the exhibit, which devices are ready to be configured as peers in an HA cluster?

• A. FortiAnalyzer1 and FortiAnalyzer3

  
  

• B. FortiAnalyzer1 and FortiAnalyzer2

  
  

• C. These devices cannot participate in the same cluster.

  
  

• D. FortiAnalyzer2 and FortiAnalyzer3

  
  

NO.6 Which two parameters impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

• A. Disk size

  
  

• B. Total quota

  
  

• C. RAID level

  
  

• D. License type

  
  

NO.7 What is true about FortiAnalyzer reports?

• A. When you enable auto-cache, reports are scheduled by default.

  
  

• B. Reports can be saved in a CSV format.

  
  

• C. You require an output profile before reports are generated.

  
  

• D. The reports from one ADOM are available for all ADOMs.

  
  

NO.8 In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?

• A. The traffic destination is another FoitiGate in the fabric.

  
  

• B. Log redundancy is configured in the fabric.

  
  

• C. The upstream FortiGate is configured to do NAT.

  
  

• D. The downstream device cannot connect to FortiAnalyzer.

  
  

NO.9 Which two statements are true regarding fabric connectors? (Choose two.)

• A. Using fabric connectors is more efficient than third-party polling information from the FortiAnalyzer API
  

• B. Cloud-out connectors allow you to send real-time logs to public cloud accounts like Amazon S3.

  
  

• C. Fabric connectors allow you to save storage costs and improve redundancy.

  
  

• D. The storage connector service does not require a separate license to send logs to the cloud platform
  

NO.10 What is true about a FortiAnalyzer Fabric?

• A. Supervisors support HA.

  
  

• B. Members events can be raised from the supervisor.

  
  

• C. The supervisor and members cannot be in different time zones

  
  

• D. The members send their logs to the supervisor.