exam questions

Exam NSE5_FAZ-7.2 All Questions

View all questions & answers for the NSE5_FAZ-7.2 exam

Exam NSE5_FAZ-7.2 topic 1 question 8 discussion

Actual exam question from Fortinet's NSE5_FAZ-7.2
Question #: 8
Topic #: 1
[All NSE5_FAZ-7.2 Questions]

Refer to the exhibit.

What does the data point at 12:20 indicate?

  • A. The performance of FortiAnalyzer is below the baseline.
  • B. FortiAnalyzer is using its cache to avoid dropping logs.
  • C. The log insert lag time is increasing.
  • D. The sqlplugind service is caught up with new logs.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
DBFront
7 months, 2 weeks ago
Selected Answer: C
C is the right answer. 7.2 Study Guide
upvoted 1 times
...
DaniSerb
8 months, 2 weeks ago
Selected Answer: C
Insert Rate vs. Receive Rate is a graph that shows the rate at which raw logs reach the FortiAnalyzer (receive rate) and the rate at which they are indexed (insert rate) by the SQL database and the sqlplugind daemon. At minimum, the difference between these parameters should be generally consistent. Log Insert Lag Time shows the amount of time between when a log was received and when it was indexed. Ideally, this parameter should be as small as possible with the occasional spikes according to the network activity being logged. A good baseline should be created to allow for the identification of possible performance issues. Reference: FortiAnalyzer Analyst Study Guide for FortiAnalyzer 7.2
upvoted 4 times
...
[Removed]
1 year, 2 months ago
Selected Answer: C
C is correct
upvoted 1 times
...
ebenav11
1 year, 2 months ago
Selected Answer: C
Option C
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...