NSE7_SOC_AR-7.6 · Question #8
While monitoring your network, you discover that one FortiGate device is sending significantly more logs to FortiAnalyzer than all of the other FortiGate devices in the topology. Additionally, the…
The correct answer is B. Create a separate ADOM for the first FortiGate device and configure a different set of storage C. Reconfigure the first FortiGate device to reduce the number of logs it forwards to. Reconfiguring the high‑volume FortiGate to send fewer or only critical logs to FortiAnalyzer directly reduces its impact on the shared ADOM quota. Placing that device in its own ADOM lets you carve out a dedicated storage pool and retention policy tailored to its logging…
Question
While monitoring your network, you discover that one FortiGate device is sending significantly more logs to FortiAnalyzer than all of the other FortiGate devices in the topology. Additionally, the ADOM that the FortiGate devices are registered to consistently exceeds its quota. What are two possible solutions? (Choose two.)
Options
- AIncrease the storage space quota for the first FortiGate device.
- BCreate a separate ADOM for the first FortiGate device and configure a different set of storage
- CReconfigure the first FortiGate device to reduce the number of logs it forwards to
- DConfigure data selectors to filter the data sent by the first FortiGate device.
How the community answered
(44 responses)- A16% (7)
- B75% (33)
- D9% (4)
Explanation
Reconfiguring the high‑volume FortiGate to send fewer or only critical logs to FortiAnalyzer directly reduces its impact on the shared ADOM quota. Placing that device in its own ADOM lets you carve out a dedicated storage pool and retention policy tailored to its logging profile, preventing it from pushing the original ADOM over its quota.
Topics
Community Discussion
No community discussion yet for this question.