Refer to the exhibits.

How many events will be added to the incident created after running this playbook?

ATen events will be added.

BNo events will be added.

CFive events will be added.

DThirteen events will be added.

Answer : A

Why must you wait for several minutes before you run a playbook that you just created?

AFortiAnalyzer needs that time to parse the new playbook.

BFortiAnalyzer needs that time to back up the current playbooks.

CFortiAnalyzer needs that time to ensure there are no other playbooks running.

DFortiAnalyzer needs that time to debug the new playbook.

Answer : A

How can you attach a report to an incident?

ABy attaching it to an event handler alert

BBy editing the settings of the desired report

CFrom the properties of an existing incident

DSaving it in JSON format, and then importing it

Answer : C

Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

ATo add a new chart under FortiView to be used in new reports

BTo build a dataset and chart automatically, based on the filtered search results

CTo add charts directly to generate reports in the current ADOM

DTo build a chart automatically based on the top 100 log entries

Answer : B

Which statement about the FortiSIEM management extension is correct?

AAllows you to manage the entire life cycle of a threat or breach.

BIts use of the available disk space is capped at 50%.

CIt requires a licensed FortiSIEM supervisor.

DIt can be installed as a dedicated VM.

Answer : A

Free NSE5_FAZ-7.2 Questions for Fortinet NSE5_FAZ-7.2 Exam as PDF & Practice Test Software