When is the FortiSOC module activated?

The FortiSOC module is activated when the FortiAnalyzer (FAZ) has a valid subscription license. This module is designed to provide advanced security event analysis and operations, allowing organizations to better manage and respond to security threats. A valid subscription license ensures that all features of the FortiSOC module can be utilized, as it often includes updates, support, and access to real-time threat intelligence.

In the context of the other options, while a trial period might allow temporary access to certain features, it does not enable the full capabilities that come with a valid subscription license. Downloading log files is related to the logging functions of FortiAnalyzer but does not inherently activate the FortiSOC module. Similarly, system performance being optimal does not determine the activation of the FortiSOC module; rather, it is reliant on the licensing status of the FortiAnalyzer. Thus, having a valid subscription license is the crucial factor for activating the FortiSOC module.