NSE7 Enterprise Firewall and VDOMs Practice Question
A network administrator is troubleshooting a scenario where FortiView in FortiAnalyzer shows no traffic data for a specific FortiGate, but logs are being received. Which two possible causes should the administrator investigate? (Choose two.)
⚠ Common exam trap
Many exam-takers assume any log reception implies traffic data is available for FortiView, but FortiView specifically requires traffic logs, not just any log type, and a corrupted database can silently break FortiView while other log viewing features remain functional.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The FortiGate is not sending traffic logs; only event logs are being forwarded
Option C is correct because FortiView visualizations are built from traffic (forward) logs, so if the FortiGate only forwards event logs and no traffic logs, FortiAnalyzer will show received logs but no traffic data in FortiView. Option D is correct because if the FortiView log database (the SQL/traffic log database used for FortiView aggregation) is corrupted or requires a rebuild, FortiAnalyzer can still receive logs while FortiView fails to display traffic data until the database is repaired or rebuilt. Option A is not the cause because clock skew typically affects log timestamps and correlation, not the complete absence of FortiView traffic data when logs are arriving. Option B is not the cause because a global ADOM affects ADOM scope and policy/object visibility, not whether FortiView renders traffic logs for a FortiGate. Option E is not the cause because a full disk would generally prevent or impair log reception/indexing broadly, whereas the scenario states logs are being received.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The FortiGate's clock is not synchronized with FortiAnalyzer
Why it's wrong here
Clock skew would affect correlations but not prevent FortiView from showing data.
- ✗
The FortiAnalyzer ADOM is configured as a global ADOM
Why it's wrong here
A global ADOM spans all administrative domains and cannot hold device-specific FortiView traffic data, so per-device logs never surface in its views. It is tempting because global ADOMs centralise policy and object management across many FortiGates, which is correct when you need shared configuration rather than per-device traffic analysis.
- ✓
The FortiGate is not sending traffic logs; only event logs are being forwarded
Why this is correct
FortiView traffic views are built solely from traffic logs. If the FortiGate forwards only event logs, the FortiAnalyzer receives data but no traffic records exist to populate FortiView, directly explaining the empty traffic display despite logs arriving.
- ✓
The FortiView database is corrupted or needs to be rebuilt
Why this is correct
FortiView queries the log database (SQL) rather than raw logs. Corruption or an incomplete rebuild leaves received logs unindexed, so traffic views return nothing even though the FortiAnalyzer is successfully receiving and storing forwarded logs.
- ✗
The FortiAnalyzer disk is full and not indexing new logs
Why it's wrong here
A full disk stops log indexing, but the stem states logs are still being received, so indexing is functioning. Disk exhaustion is tempting because it genuinely halts FortiView rendering once the log database cannot write, making it the right suspect when log reception itself has also stopped.
Go deeper
Related to this question
About these practice questions
One of 718 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.