When Administrative Domains (ADOMs) are enabled on a FortiAnalyzer, the default operational mode is Normal mode. In this mode, all VDOMs from a single FortiGate device must be assigned to the same ADOM.

Advanced mode provides greater flexibility. A key feature of Advanced mode is the ability to assign different Virtual Domains (VDOMs) from a single physical FortiGate device to multiple, separate ADOMs on the FortiAnalyzer. This allows for more granular administrative separation and reporting for different VDOMs residing on the same hardware.

A: The disk quota for an ADOM is configurable when the ADOM is created or edited, regardless of whether FortiAnalyzer is in Normal or Advanced mode.

B: The ADOM mode can be changed from both the GUI (under System Settings > All ADOMs) and the CLI, not just the CLI.

1. FortiAnalyzer Administration Guide 7.4.1

Chapter: "System Settings"

Section: "ADOMs"

Page 100.

"Normal mode is the default ADOM mode." (Supports answer D)

"In advanced mode

you can assign VDOMs from a single FortiGate device to different FortiAnalyzer ADOMs." (Supports answer C)

The guide shows a screenshot of the GUI for changing the ADOM mode

which invalidates option B.

2. FortiAnalyzer Administration Guide 7.4.1

Chapter: "System Settings"

Section: "Creating ADOMs"

Page 102.

This section shows the "Device Quota (MB)" field as a standard part of ADOM creation

which can be edited later. This functionality is not tied to the ADOM mode

invalidating option A.