View all questions & answers for the NSE 5 - FortiAnalyzer 7.6 Analyst Exam Materials exam
NSE 5 - FortiAnalyzer 7.6 Analyst Exam Materials - Question #9 Discussion
Community Explanations & Comments (10)
Brave-Dumps.com Admin
11 months ago
Selected: A, C
FortiAnalyzer 7.6 Analyst Study Guide page 43:
“This slide shows a FortiGate event log that has been normalized by FortiAnalyzer using the FortiGate log parser.”
“When you change the view to raw log format, you can see that common FortiGate log fields such as data_sourceid, dst_ip, event_subtype, and event_policyid have been converted to normalized log fields.”
“This slide shows a FortiGate event log that has been normalized by FortiAnalyzer using the FortiGate log parser.”
“When you change the view to raw log format, you can see that common FortiGate log fields such as data_sourceid, dst_ip, event_subtype, and event_policyid have been converted to normalized log fields.”
Anonymous User
7 months ago
Selected: A, B
A) We see normalized fields produced by the parser like data_parsername so this is a normalized log.
B) The exhibit shows the formatted key-value representation, not the raw device log string.
C) Incorrect because an original log would not contain FAZ normalization fields like adom_oid or data_parsername.
D) Wrong since a raw log is not already parsed like this one
B) The exhibit shows the formatted key-value representation, not the raw device log string.
C) Incorrect because an original log would not contain FAZ normalization fields like adom_oid or data_parsername.
D) Wrong since a raw log is not already parsed like this one
Anonymous User
7 months ago
Selected: A, D
This is the example on page 43.
The logs are normalized by Fortigate Parser Log,
and are in Raw Logs as the example.
The logs are normalized by Fortigate Parser Log,
and are in Raw Logs as the example.
Anonymous User
7 months ago
Selected: A, D
This is a normalizad log and a raw log. Page 43
Anonymous User
7 months ago
Selected: A, D
It's A & D
Anonymous User
6 months ago
Selected: A, D
A,D - It is a normalized log, not an original log from FortiGate, since FortiAnalyzer added some of its fields, such as adom_oid. It is also in raw log format, since a formatted view shows logs sorted in a table.
Anand Chavda
5 months ago
Selected: A, C
AC is the answer
ali
4 months ago
Selected: A, D
AD
Anonymous User
1 month ago
Selected: A, D
this is the correct answer , why not C ? Because this is not the original log that came from FortiGate (notice the part the says data_parsername=FortiGate Log Parser ) this part did not come from Fortigate log
hadak li dar smito
1 month ago
@Brave-Dumps.com Admin can you correct this please
it cannot be C
Anonymous User
1 month ago
Selected: A, D
not the original log. it has been parsed.
Refer to the exhibit. Which two observations can you make after reviewing this log entry? (Choose two answers)
Brave-Dump Community Votes