Fortinet Exam FCP_FAZ_AD-7.4 Topic 1 Question 3 Discussion

Actual exam question for Fortinet's FCP_FAZ_AD-7.4 exam

Question #: 3
Topic #: 1

Which two statements about FortiAnalyzer operating modes are true? (Choose two.)

AWhen in collector mode, FortiAnalyzer offloads the log receiving task to the analyzer.

BWhen in analyzer mode, FortiAnalyzer supports event management and reporting features.

CFor the collector, you should allocate most of the disk space to analytics logs.

DAnalyzer mode is the default operating mode.

Show Suggested Answer

Suggested Answer: B

When in analyzer mode, FortiAnalyzer supports event management and reporting features.

In analyzer mode, FortiAnalyzer provides full support for log analysis, event management, and reporting capabilities.

Analyzer mode is the default operating mode.

By default, FortiAnalyzer operates in analyzer mode, which allows for log analysis and reporting.

The other options are incorrect because:

In collector mode, the FortiAnalyzer primarily stores logs and forwards them to another FortiAnalyzer in analyzer mode, not the other way around.

In collector mode, most disk space is usually allocated to storage rather than analytics, as the logs are primarily stored for forwarding.

by Clorinda at Oct 23, 2024, 12:44 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

9 days ago

Hmm, I think B and D are the correct answers. Collector mode sounds more like a job for the FortiGates, not the FortiAnalyzer!

upvoted 0 times

...

10 days ago

I agree with B and D, but I'm not sure about C. Wouldn't you want to allocate more space for the actual log data rather than analytics?

upvoted 0 times

...

22 days ago

I think A and B are true.

upvoted 0 times

...