NSE 5 – FortiAnalyzer 6.0 — Question 24

Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?

Answer options

• A. The total disk space is insufficient and you need to add other disk.
• B. CPU resources are too high.
• C. The ADOM disk quota is set too low based on log rates.
• D. Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.

Correct answer: C

Explanation

The correct answer is C because if the ADOM disk quota is insufficient, it will result in logs being deleted prematurely to make room for new logs. Option A, while related to disk space, does not specifically address the quota set for the ADOM. Options B and D do not directly affect the archiving settings and are not relevant to the issue of premature log deletion.