NSE5_FAZ-6.4 Fortinet NSE 5 – FortiAnalyzer 6.4 Exam

Fortinet NSE 5 – FortiAnalyzer 6.4
Exam series: NSE5_FAZ-6.4
Number of questions: 30
Exam time: 60 minutes
Language: English and Japanese
Product version: FortiAnalyzer 6.4
Status: Available
Exam details: exam description

NSE 5 Certification
The Network Security Analyst designation recognizes your ability to implement network security management and analytics using Fortinet security devices. We recommend this course for network and security analysts who require the expertise to centrally manage, analyze, and report on Fortinet security devices. Visit the Fortinet NSE Certification Program page for information about certification requirements.

Fortinet NSE 5—FortiAnalyzer 6.4
The Fortinet NSE 5—FortiAnalyzer 6.4 exam is part of the NSE 5 Network Security Analyst program, and recognizes the successful candidate’s knowledge of and expertise with FortiAnalyzer.
The exam tests applied knowledge of FortiAnalyzer configuration, operation, and day-to-day administration, and includes operational scenarios, system configuration, device registration, and troubleshooting.

Audience
The Fortinet NSE 5—FortiAnalyzer 6.4 exam is intended for network and security analysts who are responsible for the configuration and administration of FortiAnalyzer solutions for centralized logging and reporting.

Exam Details
Exam name Fortinet NSE 5—FortiAnalyzer 6.4
Exam series NSE5_FAZ-6.4
Time allowed 60 minutes
Exam questions 30 multiple-choice questions
Scoring Pass or fail, a score report is available from your Pearson VUE account
Language English and Japanese
Product version FortiOS 6.4.1
FortiAnalyzer 6.4.1

Exam Topics
Successfu* candidates have applied knowledge and skills in the following areas and tasks:

* System configuration
* Perform initia* configuration
* Configure administrative access
* Configure high availability (HA)
* Configure administrative domains (ADOMs)
* Troubleshoot RAID
* Device registration and communication
* Register devices in ADOMs
* Troubleshoot device communication issues
* Manage registered devices
* Logs and reports
* Protect log data
* Troubleshoot and manage logs
* Configure event handlers
* Customize and generate reports
* Troubleshoot reports

Training Resources
The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, candidates are
strongly encouraged to have hands-on experience with the exam topics and objectives.

NSE Training Institute Courses
* NSE 5 FortiAnalyzer 6.4

Other Resources
* FortiAnalyzer Administration Guide 6.4.1
* FortiAnalyzer New Features Guide 6.4.0
* FortiAnalyzer Best Practices 6.4.0
* FortiAnalyzer CLI Reference 6.4.1

Experience
* Minimum of six months to one year of hands-on experience with FortiGate and FortiAnalyzer

Exam Sample Questions
QUESTION 1
Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?

A. FROM
B. ORDER BY
C. LIMIT
D. WHERE

Answer: A

QUESTION 2
If a hard disk on FortiAnalyzer that supports hardware RAID fails, what can be done on FortiAnalyzer?

A. Shut down FortiAnalyzer and replace the disk.
B. Run execute format disk to format and restart the FortiAnalyzer device.
C. No need to do anything because the disk will self-recover.
D. Hot swap the disk

Answer: A

QUESTION 3
Which two methods are the most common methods to control and restrict administrative access on FortiAnalyzer? (Choose two.)

A. Virtual domains
B. Administrative access profiles
C. Trusted hosts
D. Security Fabric

Answer: B,C