Which two statements about the Security Fabric are true? (Choose two.)

Question

Options

• AEach member of the Security Fabric maintains the shared Security Fabric map.
• BOnly the root FortiGate collects network topology information and forwards it to FortiAnalyzer.
• CFortiGate uses the FortiTelemetry protocol to communicate with FortiAnalyzer.
• DEach FortiGate device in the Security Fabric must have bidirectional FortiTelemetry
• EOnly FortiGate devices with configuration-sync sel to Local receive and synchronize the global

• A
  3% (1)
• B
  86% (31)
• C
  8% (3)
• E
  3% (1)

Explanation

B is correct because in the Security Fabric hierarchy, the root FortiGate acts as the central aggregator - it collects topology information from downstream members and is the sole device responsible for forwarding that data to FortiAnalyzer. D is correct because FortiTelemetry is the inter-FortiGate communication protocol within the fabric, and every participating device must have it enabled in both directions to send and receive fabric data from its neighbors.

A is wrong because only the root FortiGate maintains the complete Security Fabric map; downstream members have limited visibility, not a full shared copy. C is wrong because FortiTelemetry is used for FortiGate-to-FortiGate fabric communication - FortiGate communicates with FortiAnalyzer via a separate protocol (OFTP/syslog), not FortiTelemetry. E is wrong because devices set to configuration-sync = local actually retain their own settings rather than synchronizing global fabric settings from the root.

Memory tip: Think "Root Reports, Fabric Flows Both Ways" - the Root sends to FortiAnalyzer (B), and FortiTelemetry must flow bidirectionally on every node (D).

No community discussion yet for this question.