nerdexam
Fortinet

FCP_FAZ_AN-7.4 · Question #10

Which two statements about local logs on FortiAnalyzer are true? (Choose two.)

The correct answer is B. You can view playbook logs for all ADOMs in the root ADOM. C. Event logs show system-wide information, whereas application logs are ADOM specific. Playbook logs, which relate to automated incident response actions, can be viewed centrally in the root ADOM, allowing visibility across all ADOMs. Event logs on FortiAnalyzer typically provide system-wide information applicable to the entire FortiAnalyzer unit, while…

Logging and Archiving

Question

Which two statements about local logs on FortiAnalyzer are true? (Choose two.)

Options

  • AThey are not supported in FortiView.
  • BYou can view playbook logs for all ADOMs in the root ADOM.
  • CEvent logs show system-wide information, whereas application logs are ADOM specific.
  • DEvent logs are available only in the root ADOM.

How the community answered

(53 responses)
  • A
    15% (8)
  • B
    77% (41)
  • D
    8% (4)

Explanation

Playbook logs, which relate to automated incident response actions, can be viewed centrally in the root ADOM, allowing visibility across all ADOMs. Event logs on FortiAnalyzer typically provide system-wide information applicable to the entire FortiAnalyzer unit, while application logs are specific to each ADOM, reflecting the logs related to devices and activities managed within that ADOM. https://docs.fortinet.com/document/fortianalyzer/7.6.3/administration-guide/208717/enabling-and- disabling-the-adom-feature

Topics

#local logs#playbook logs#event logs#ADOM scope

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full FCP_FAZ_AN-7.4 Practice