A FortiAnalyzer system backup is designed to save the device's configuration and reporting structure, not the voluminous log data it collects. The backup file, typically a .conf file, contains the complete system configuration, which includes settings for administrators, registered devices, and system-level options. It also includes all report-related information, such as custom report layouts, report schedules, and output profiles. This allows an administrator to restore the operational state and reporting capabilities of the FortiAnalyzer unit without needing to back up the potentially massive log database.

A. Logs from registered devices: This is incorrect. The official documentation explicitly states that the system configuration backup does not include log files. Log backup is a separate, distinct process.

B. Database snapshot: This is incorrect. The system backup does not include a snapshot of the log database. It only backs up configuration data, not the analytical or log data itself.

1. FortiAnalyzer 7.4 Administration Guide

Page 61

"Backing up and restoring the configuration":

"You can back up the full configuration of your FortiAnalyzer system... The backup file includes the FortiAnalyzer system configuration and reports." This statement directly supports options C and D.

"The backup file does not include logs." This statement directly refutes option A.

2. FortiAnalyzer 7.4 Administration Guide

Page 31

"System Information widget > Backup":

"You can perform a system backup of the FortiAnalyzer configuration from the System Information widget. The backup file is a .conf file that contains the system configuration." This supports option D. The guide consistently refers to the backup as containing "system configuration".