Online Access Free NSE6_FAZ-7.2 Exam Questions

Which statement is true about using aggregation mode on FortiAnalyzer?

• A.In aggregation mode, logs and content files are forwarded in real time.
• B.Aggregation mode can work with syslog servers.
• C.Aggregation mode supports log filters.
• D.Aggregation mode can be configured only on the CLI.

Which statement is true about the communication between FortiGate high availability (HA) clusters and FortiAnalyzer?

• A.FortiAnalyzer distinguishes each cluster member by its MAC address.
• B.Only the primary device in the cluster communicates with FortiAnalyzer.
• C.You must add the device lo the cluster first, and thenregistersthe cluster with FortiAnalyzer.
• D.Each cluster member sends its logs directly to FortiAnalyzer.

Which statement is true about ADOMs?

• A.A fabric ADOM can include all the device types supported by FortiAnalyzer.
• B.When a FortiAnalyzer Fabric is implemented, the default ADOM mode is set to advanced.
• C.In normal mode, you cannot change the disk quota of the ADOM after its creation.
• D.You can change the ADOM mode only through the GUI.

You finished registering a FortiGate device. After traffic starts to flow through FortiGate. you notice that only some of the logs expected are being received on FortiAnalyzer.
What could be the reason for the logs not arriving on FortiAnalyzer?

• A.This FortiGate is part of an HA cluster but it is the secondary device.
• B.FortiGate does not have logging configured correctly.
• C.FortiGate was added to the wrong ADOM type.
• D.This FortiGate model is not fully supported.

Which FortiAnalyzer command erases all device settings, images, databases, and logs on disk, but preserves The network configuration?

• A.executeformatlogdisk
• B.executefactory-reset
• C.executeformat disk
• D.executereset all-except-ip