Refer to the exhibit.

Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)

1. A. Report size will be optimized to conserve disk space on FortiAnalyzer.
2. B. Reports will be cached in the memory.
3. C. This feature is automatically enabled for scheduled reports.
4. D. Enabling auto-cache reduces report generation time for reports that require a long time to assemble datasets.

Correct Answer: CD

How does FortiAnalyzer retrieve specific log data from the database?

1. A. SQL FROM statement
2. B. SQL GET statement
3. C. SQL SELECT statement
4. D. SQL EXTRACT statement

Correct Answer: A
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/137bb60e-ff37-11e8-8524-f8bc1258b8

Which statement correctly describes the management extensions available on FortiAnalyzer?

1. A. Management extensions do not require additional licenses.
2. B. Management extensions allow FortiAnalyzer to act as a ForbSIEM supervisor.
3. C. Management extensions require a dedicated VM for best performance.
4. D. Management extensions may require a minimum number of CPU cores to run.

Correct Answer: A

Refer to the exhibit.

What is the purpose of using the Chart Builder feature on FortiAnalyzer?

1. A. In Log View, this feature allows you to build a dataset and chart automatically, based on the filtered search results.
2. B. In Log View, this feature allows you to build a chart and chart automatically, on the top 100 log entries.
3. C. This feature allows you to build a chart under FortiView.
4. D. You can add charts to generated reports using this feature.

Correct Answer: A

In FortiAnalyzer’s FormView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

1. A. Configure local DNS servers on FortiAnalyzer
2. B. Resolve IPs on FortiGate
3. C. Configure # set resolve-ip enable in the system FortiView settings
4. D. Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

Correct Answer: B