nerdexam
Fortinet

FCP_FAZ_AN-7.4 · Question #23

You must find a specific security event log in the FortiAnalyzer logs displayed in FortiView, but, so far, you have been unsuccessful. Which two tasks should you perform to investigate why you are…

The correct answer is C. Review the ADOM data policy D. Check logs in the Log Browse. Checking logs directly in Log Browse helps verify if the event logs exist and are correctly Reviewing the ADOM data policy ensures that the logs are permitted and visible within the current ADOM context, which can affect log visibility in FortiView.

Forensic Analysis

Question

You must find a specific security event log in the FortiAnalyzer logs displayed in FortiView, but, so far, you have been unsuccessful. Which two tasks should you perform to investigate why you are having this issue? (Choose two.)

Options

  • AOpen .gz log files in FortiView
  • BRebuild the SQL database and check FortiView
  • CReview the ADOM data policy
  • DCheck logs in the Log Browse

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    7% (2)
  • C
    83% (24)

Explanation

Checking logs directly in Log Browse helps verify if the event logs exist and are correctly Reviewing the ADOM data policy ensures that the logs are permitted and visible within the current ADOM context, which can affect log visibility in FortiView.

Topics

#FortiView#SQL database#ADOM data policy#Log Browse

Community Discussion

No community discussion yet for this question.

Full FCP_FAZ_AN-7.4 Practice