What does the disk status Degraded mean for RAID management?

What does the disk status Degraded mean for RAID management?A . One or more drives are missing from the FortiAnalyzer unit. The drive is no longer available to the operating system. B. The FortiAnalyzer device is writing to all the hard drives on the device in order to make the...

November 14, 2022 No Comments READ MORE +

How can you resolve the source and destination IPs, without introducing any additionalperformance impact to FortiAnalyzer?

In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving toa hostname. How can you resolve the source and destination IPs, without introducing any additionalperformance impact to FortiAnalyzer?A . Configure local DNS servers on FortiAnalyzer B. Resolve IPs on FortiGate C. Configure # set resolve-ip enable...

November 14, 2022 No Comments READ MORE +

What is the purpose of a dataset query in FortiAnalyzer?

What is the purpose of a dataset query in FortiAnalyzer?A . It sorts log data into tables B. It extracts the database schema C. It retrieves log data from the database D. It injects log data into the databaseView AnswerAnswer: C Explanation: Reference: https://docs2.fortinet.com/document/fortianalyzer/6.0.4/administration-guide/148744/creating-datasets

November 13, 2022 No Comments READ MORE +

Which two statements are true regarding fabric connectors? (Choose two.)

Which two statements are true regarding fabric connectors? (Choose two.)A . Configuring fabric connectors to send notification to ITSM platform upon incidentcreation Is more efficient than third-party information from the FortiAnalyzer API. B. Fabric connectors allow to save storage costs and improve redundancy. C. Storage connector service does not require...

November 13, 2022 No Comments READ MORE +

What can be the reason for this failure?

The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device. What can be the reason for this failure?A . FortiAnalyzer is in an HA cluster. B. ADOM mode should be set to advanced, in order to register the FortiClient EMS device. C. ADOMs are not enabled...

November 12, 2022 No Comments READ MORE +

What can the CLI command # diagnose test application oftpd 3 help you to determine?

What can the CLI command # diagnose test application oftpd 3 help you to determine?A . What devices and IP addresses are connecting to FortiAnalyzer B.What logs, if any, are reaching FortiAnalyzer C.What ADOMs are enabled and configured D.What devices are registered and unregisteredView AnswerAnswer: A Explanation: https://docs.fortinet.com/document/fortianalyzer/6.2.5/cli-reference/395556/test#test_application

November 12, 2022 No Comments READ MORE +

What are analytics logs on FortiAnalyzer?

What are analytics logs on FortiAnalyzer?A . Log type Traffic logs. B. Logs that roll over when the log file reaches a specific size. C. Logs that are indexed and stored in the SQL. D. Raw logs that are compressed and saved to a log file.View AnswerAnswer: C

November 11, 2022 No Comments READ MORE +

Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)

Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)A . Must configure the FortiAnalyzer end of the tunnel only--the FortiGate end is auto-negotiated. B. Must establish an IPsec tunnel ID and pre-shared key. C. IPsec cannot be enabled if SSL is enabled as well....

November 11, 2022 No Comments READ MORE +

For which two purposes would you use the command set log checksum? (Choose two.)

For which two purposes would you use the command set log checksum? (Choose two.)A . To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server B. To prevent log modification or tampering C. To encrypt log communications D. To send an identical set of logs...

November 11, 2022 No Comments READ MORE +

Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.)

Which two statements are true regarding high availability (HA) on FortiAnalyzer? (Choose two.) A. FortiAnalyzer HA can function without VRRP. and VRRP is required only if you have more than two FortiAnalyzer devices in a cluster. B. FortiAnalyzer HA supports synchronization of logs as well as some system and configuration...

November 11, 2022 No Comments READ MORE +