Nse5 Fortianalyzer Operations

A FortiAnalyzer is failing to receive logs from a FortiGate. After verifying the IP connectivity and the FortiGate registration status, which setting should be checked next?

Which THREE types of dashboards can be viewed in FortiAnalyzer?

When using 'Log Forwarding', can you filter the logs before they are forwarded?

When setting up a 'FortiSoC' playbook to send an email, what must be configured first?

Where do you go to view the real-time logs currently being received by the FortiAnalyzer?

What is the purpose of 'Auto-cache' for reports?

When using FortiSoC playbooks, what is the 'Connector' used for?

What is the function of the 'Device Manager' in FortiAnalyzer?

Which TWO actions are commonly performed within the 'Device Manager' module?

What happens when you change the 'Log Policy' to 'Archive only'?

Which TWO tasks are part of the 'Log Management' phase on FortiAnalyzer?

Which of the following is true about 'Report Data Masking'?

What is the primary function of the FortiAnalyzer 'Log View' page?

Which THREE items are found in the 'System Settings' area?

An analyst notices that a FortiAnalyzer appliance is not archiving logs to a configured remote storage server, even though the local disk still has free space. The administrator confirms the archive schedule is enabled and the remote server is reachable. Which setting should the analyst verify first?

Which TWO methods can be used to back up FortiAnalyzer configuration?

A user reports that they cannot see any data in 'FortiView' for a specific device. What is the most likely cause?

You are troubleshooting a scenario where an Event Handler is not triggering as expected. What is the most effective way to verify if the logs are matching the filter criteria defined in the handler?

Which TWO of the following are valid log file types supported by FortiAnalyzer?

Which THREE components are visible in the 'Log View' interface?

When adding a FortiGate to a FortiAnalyzer, which information is required?

What is the purpose of an 'Event Handler' in FortiAnalyzer?

Which component of FortiAnalyzer is used to identify top talkers on the network?

Which dashboard provides a 'Threat Map'?

What is a 'Playbook' in the context of FortiSoC?

A playbook is failing to execute an action on a FortiGate. Which tool is used to view the execution history and logs of the playbook?

Which protocol is utilized for log forwarding between FortiAnalyzer units?

Which dashboard shows the health status of all registered devices?

What happens to the logs if a FortiAnalyzer reaches its 'Maximum Storage' limit?

Which FortiView tool allows you to see traffic patterns based on geographical origin?

Which TWO methods can be used to authenticate administrative users on FortiAnalyzer?

Which TWO actions can be triggered by a FortiSoC Playbook?

Which THREE elements are part of the Event Handler configuration?

What is the purpose of 'Report Templates'?

If you want to ensure that only authorized administrators can access the FortiAnalyzer GUI, which feature should you implement?

How can you verify that a FortiGate is sending logs to the FortiAnalyzer?

Which TWO types of report formats can be generated by FortiAnalyzer?

Which dashboard widget provides a high-level summary of system resource usage?

What is the purpose of 'Log Forwarding' in FortiAnalyzer?

When configuring an 'Event Handler' with a 'Threshold', what does the 'Count' field represent?

When scheduling a report, what is the purpose of the 'Output Profile'?

You are trying to delete an ADOM, but the option is greyed out. What is the most likely cause?

A security team stores logs from several FortiGate devices in a single ADOM on their FortiAnalyzer appliance. They need to run a report that includes data from only two of those devices while excluding all others. What is the most appropriate way to accomplish this on FortiAnalyzer?

Which menu path is used to create a new Administrator account?

A compliance officer needs FortiAnalyzer to alert the security team by email whenever an administrator logs in to the FortiGate at a branch office outside business hours. Which FortiAnalyzer capability should be configured to satisfy this requirement?

When configuring log forwarding from FortiAnalyzer to a remote Syslog server, which TWO of the following parameters must be correctly configured to ensure the remote server accepts the logs?

When should you use 'Log Archive' instead of 'Log Database'?

If a FortiAnalyzer is in 'Collector' mode, what is its primary limitation?

What is the maximum number of ADOMs supported on a FortiAnalyzer?

Which TWO factors impact the performance of report generation?

You need to restrict an administrator to only viewing reports for a specific ADOM. How do you achieve this?

You are configuring an Event Handler to monitor for failed login attempts. To ensure you do not receive too many alerts for the same source IP in a short duration, what should you configure?

Which administrative account type has full access to all ADOMs and system settings?

What does the 'FortiView' module provide?

An administrator needs to identify which application is consuming the most bandwidth on the network. Which feature in FortiView provides the most efficient visual representation for this task?

Which THREE components are required to create a functional FortiSoC Playbook?

Which TWO conditions must be met for a report to run successfully?

If you need to change the log storage retention period for a specific ADOM, where is this setting located?

A customer wants to offload logs from FortiAnalyzer to a remote Syslog server. Where is this configured?

Which protocol does FortiAnalyzer primarily use for Web UI access?

Which feature in the Device Manager allows you to push configuration changes to multiple FortiGate devices at once?