Question 1

What happens when a log file saved on FortiAnalyzer disks reaches the size specified in the device log settings?

Options :

A : The log file is stored as a raw log and is available for analytic support.

B : The log file rolls over and is archived.

C : The log file is purged from the database.

D : The log file is overwritten.

Answer: B

Question 2

Which two statements about deleting ADOMs are true? (Choose two.)

Options :

A : Logs must be purged or migrated before you can delete an ADOM.

B : ADOMs with registered devices cannot be deleted

C : Default ADOMs cannot be deleted.

D : The status of the ADOMs must be unlocked.

Answer: B

Question 3

It is a best practice to upload FortiAnalyzer local logs to a remote server.Which two remote servers are supported for the upload? (Choose two.)

Options :

A : FTP

B : SFTP

C : UDP

D : TFTP

Answer: A,B

Question 4

What are the operating modes of FortiAnalyzer? (Choose two)

Options :

A : Standalone

B : Manager

C : Analyzer

D : Collector

Answer: C,D

Question 5

Which SQL query is in the correct order to query the database in the FortiAnalyzer?

Options :

A : SELECT devid FROM Slog GROOP BY devid WHERE * user' =* USERl'

B : SELECT devid WHERE 'u3er'='USERl' FROM $ log GROUP BY devid

C : SELECT devid FROM Slog- WHERE *user' =' USERl' GROUP BY devid

D : FROM Slog WHERE 'user* =' USERl' SELECT devid GROUP BY devid

Answer: C