A. Reports can be moved between ADOMs but templates cannot.

B. Templates do not include advanced report settings, but reports do.

C. Reports support macros but templates do not

D. Templates can be cloned, but reports cannot be cloned.

A. They can be used to display the database schema.

B. They must be followed immediately by a WHERE clause.

C. They are not used in macros.

D. They can be used to purge log entries from the database.

A. The security risk was blocked.

B. The risk source is isolated.

C. The security risk was dropped.

D. The security event risk is from an application control log.

A. Notifications can be sent only by email.

B. If you use multiple fabric connectors, all connectors must have the same settings.

C. You can send notifications to multiple external platforms.

D. Notifications can be sent only when an incident is updated or deleted.

A. Application control logs are ADOM-specific

B. Playbook logs for all ADOMs are in the root ADOM.

C. Local logs are not displayed in FortiView.

D. Event logs are available in the root ADOM.

A. The endpoint is marked as Compromised and, optionally, can be put in quarantine.

B. A new infected entry is added for the corresponding endpoint under Compromised Hosts.

C. FortiAnalyzer flags the associated host for further analysis.

D. The detection engine classifies those logs as Suspicious.

A. Outbreak alerts are available on the root ADOM only.

B. New alerts are received by email.

C. An additional license is required.

D. It automatically downloads new event handlers and reports.

A. Can you show me all the log entries for the endpoint 192.168.1.10?

B. Show all logs from the past week

C. Show logs for 192.168.1.10 (past week)

D. Show logs for 192.168.1.10

A. The low indexing values require investigation.

B. The log rate higher than the message rate is not normal.

C. There are more event logs than traffic logs.

D. The output is not ADOM-specific.