Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?

1. A. Incidents dashboards
2. B. Threat hunting
3. C. FortiView Monitor
4. D. Outbreak alert services

Correct Answer: B

What is the purpose of employing RAID with FortiAnalyzer?

1. A. To introduce redundancy to your log data
2. B. To provide data separation between ADOMs
3. C. To separate analytical and archive data
4. D. To back up your logs

Correct Answer: A
https://en.wikipedia.org/wiki/RAID#:~:text=RAID%20(%22Redundant%20Array%20of%20Inexpensive,%2C%

A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer.
What can you do on FortiAnalyzer to accomplish this?

1. A. Click FortiView and generate a report for that administrator.
2. B. Click Task Monitor and view the tasks performed by that administrator.
3. C. Click Log View and generate a report for that administrator.
4. D. View the tasks performed by the rogue administrator in Fabric View.

Correct Answer: B

By default, what happens when a log file reaches its maximum file size?

1. A. FortiAnalyzer overwrites the log files.
2. B. FortiAnalyzer stops logging.
3. C. FortiAnalyzer rolls the active log by renaming the file.
4. D. FortiAnalyzer forwards logs to syslog.

Correct Answer: C

Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)

1. A. ADOMs are enabled by default.
2. B. ADOMs constrain other administrator’s access privileges to a subset of devices in the device list.
3. C. Once enabled, the Device Manager, FortiView, Event Management, and Reports tab display per ADOM.
4. D. All administrators can create ADOMs--not just the admin administrator.

Correct Answer: BC