NSE4 · Question #283
A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit. Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data…
The correct answer is A. The FortiGate unit is considered an unregistered device. The FortiGate unit cannot archive data to the FortiAnalyzer because it is not registered, meaning the FortiAnalyzer has not authorized it to send and store data.
Question
A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit. Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data to the FortiAnalyzer unit?
Exhibit
Options
- AThe FortiGate unit is considered an unregistered device.
- BThe FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the
- CThe FortiGate unit has insufficient privileges. The administrator should edit the device entry in the
- DThe FortiGate unit is being treated as a syslog device and is only permitted to send log data.
How the community answered
(34 responses)- A91% (31)
- B6% (2)
- D3% (1)
Why each option
The FortiGate unit cannot archive data to the FortiAnalyzer because it is not registered, meaning the FortiAnalyzer has not authorized it to send and store data.
For a FortiGate unit to successfully send archive data to a FortiAnalyzer, it must first be added and authorized (registered) as a managed device on the FortiAnalyzer unit. An unregistered device will not have its data accepted by the FortiAnalyzer.
While a device can be explicitly blocked from sending data, an 'unregistered' status indicates a more fundamental lack of authorization by the FortiAnalyzer to accept data from that specific FortiGate.
Insufficient privileges might restrict management access or viewing logs, but the primary reason for a FortiGate being unable to send archive data to FortiAnalyzer is typically its registration status, not internal FortiGate user privileges.
If the FortiGate were treated as a syslog device, it would still send log data; 'unable to archive data' points to a more comprehensive failure to manage and store data, which is characteristic of an unregistered device.
Concept tested: FortiAnalyzer Device Registration
Source: https://docs.fortinet.com/document/fortianalyzer/7.4.0/administration-guide/200508/adding-devices
Topics
Community Discussion
No community discussion yet for this question.
