ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE8_812 All Questions

View all questions & answers for the NSE8_812 exam
Go to Exam

Exam NSE8_812 topic 1 question 28 discussion

Actual exam question from Fortinet's NSE8_812
Question #: 28
Topic #: 1
[All NSE8_812 Questions]

You must analyze an event that happened at 20:37 UTC.

One log relevant to the event is extracted from FortiGate logs:
The devices and the administrator are all located in different time zones Daylight savings time (DST) is disabled.

The FortiGate is at GMT-10:00 -
The FortiAnalyzer is at GMT-08:00
Your browser local time zone is at GMT-03:00
You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?

  • A. 20:37:08
  • B. 10:37:08
  • C. 17:37:08
  • D. 12:37:08
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by ama6 at Sept. 16, 2023, 10:28 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
JackieTYF
2 months, 3 weeks ago
Selected Answer: D
D is correct follow FAZ local time.
upvoted 1 times
...
dspavvn
7 months, 2 weeks ago
Selected Answer: D
- GUI 'Date/time' column is calculated based on itime. - itime is generated by FAZ when it receives a log (with SQL enabled) i.e. FAZ local time. So the filter will be based on itime which is the local time on the FAZ (GMT-8) so UTC 20:37 makes the time GMT 20:37, so that minus 8 makes it 12:37.
upvoted 2 times
...
JJISHE
10 months, 1 week ago
Selected Answer: D
I suppose D. The question says that something happened at 20:37, but u have extracted a related log from fortigate (time 10:37:08). FGT is GMT-10 and FAZ is GMT-8 (so +2). When a FAZ receive a log it register the hour of the device as dtime and maintain itime as the time it received the log. FAZ use itime as a reference for Time in GUI (https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-Understanding-FortiAnalyzer-time-related-fields/ta-p/197569) So if u want to search the related log u must use 12:37:08. This IMPO
upvoted 2 times
...
ac89l
11 months, 3 weeks ago
Can anyone please confirm this answer? I could not find any related document on this ..
upvoted 1 times
ac89l
11 months, 3 weeks ago
i would go for D. but not sure i think FAZ will display the log as its local time, and not as the FGT time.
upvoted 1 times
re_j0hn
11 months, 1 week ago
Uses the FAZ time which is UTC-8. Answer is D. 12:37:08.
upvoted 2 times
...
...
...
ama6
1 year, 3 months ago
C: C. 17:37:08
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago