The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device. What can be the reason for this failure?

1. A. FortiAnalyzer is in an HA cluster.
2. B. ADOM mode should be set to advanced, in order to register the FortiClient EMS device.
3. C. ADOMs are not enabled on FortiAnalyzer.
4. D. A separate license is required on FortiAnalyzer in order to register the FortiClient EMS device.

Correct Answer: C

You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?

1. A. FortiAnalyzer uses log fetching to retrieve the logs when back online
2. B. FortiGate uses the miglogd process to cache the logs
3. C. The logfiled process stores logs in offline mode
4. D. Logs are dropped

Correct Answer: B

If you upgrade the FortiAnalyzer firmware, which report element can be affected?

1. A. Custom datasets
2. B. Report scheduling
3. C. Report settings
4. D. Output profiles

Correct Answer: A
https://docs.fortinet.com/document/fortianalyzer/6.2.5/upgrade-guide/669300/checking-reports

Which two statements about log forwarding are true? (Choose two.)

1. A. Forwarded logs cannot be filtered to match specific criteria.
2. B. Logs are forwarded in real-time only.
3. C. The client retains a local copy of the logs after forwarding.
4. D. You can use aggregation mode only with another FortiAnalyzer.

Correct Answer: CD
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/420493/modes https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/621804/log-forwarding

Which daemon is responsible for enforcing the log file size?

1. A. sqlplugind
2. B. logfiled
3. C. miglogd
4. D. ofrpd

Correct Answer: B