Fortinet
NSE5_FAZ-5.4 · Question #9
Consider the following scenario: The FortiAnalyzer administrator creates a custom dataset. The Log type is set to Traffic and the Time Period is set to Last 30 days. The following query is entered…
The correct answer is B. The database does not contain the data to make the SQL query work. See the full explanation below for the reasoning.
Question
Consider the following scenario: The FortiAnalyzer administrator creates a custom dataset. The Log type is set to Traffic and the Time Period is set to Last 30 days. The following query is entered:
SELECT root_domain(hostname) as website, count(*) as totalnum, dstcountry FROM $log WHERE $filter and hostname is not null GROUP BY hostname, dstcountry ORDER BY session desc LIMIT 25. When the administrator tests the custom dataset, an error message is returned. Why?
Options
- AThe clauses are not coded in the correct sequence.
- BThe database does not contain the data to make the SQL query work.
- CThe database columns identified in the SELECT clause belong to the Virus log type, not the
- DThe database column in the ORDER BY clause ("session") is not in the SELECT clause, and
How the community answered
(60 responses)- A12% (7)
- B80% (48)
- C5% (3)
- D3% (2)
Community Discussion
No community discussion yet for this question.