nerdexam
Fortinet

NSE4 · Question #283

A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit. Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data…

The correct answer is A. The FortiGate unit is considered an unregistered device. The FortiGate unit cannot archive data to the FortiAnalyzer because it is not registered, meaning the FortiAnalyzer has not authorized it to send and store data.

Submitted by lucia.co· Apr 18, 2026Logging and Monitoring

Question

A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit. Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data to the FortiAnalyzer unit?

Exhibit

NSE4 question #283 exhibit

Options

  • AThe FortiGate unit is considered an unregistered device.
  • BThe FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the
  • CThe FortiGate unit has insufficient privileges. The administrator should edit the device entry in the
  • DThe FortiGate unit is being treated as a syslog device and is only permitted to send log data.

How the community answered

(34 responses)
  • A
    91% (31)
  • B
    6% (2)
  • D
    3% (1)

Why each option

The FortiGate unit cannot archive data to the FortiAnalyzer because it is not registered, meaning the FortiAnalyzer has not authorized it to send and store data.

AThe FortiGate unit is considered an unregistered device.Correct

For a FortiGate unit to successfully send archive data to a FortiAnalyzer, it must first be added and authorized (registered) as a managed device on the FortiAnalyzer unit. An unregistered device will not have its data accepted by the FortiAnalyzer.

BThe FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the

While a device can be explicitly blocked from sending data, an 'unregistered' status indicates a more fundamental lack of authorization by the FortiAnalyzer to accept data from that specific FortiGate.

CThe FortiGate unit has insufficient privileges. The administrator should edit the device entry in the

Insufficient privileges might restrict management access or viewing logs, but the primary reason for a FortiGate being unable to send archive data to FortiAnalyzer is typically its registration status, not internal FortiGate user privileges.

DThe FortiGate unit is being treated as a syslog device and is only permitted to send log data.

If the FortiGate were treated as a syslog device, it would still send log data; 'unable to archive data' points to a more comprehensive failure to manage and store data, which is characteristic of an unregistered device.

Concept tested: FortiAnalyzer Device Registration

Source: https://docs.fortinet.com/document/fortianalyzer/7.4.0/administration-guide/200508/adding-devices

Topics

#FortiAnalyzer#Device registration#Data archiving#FortiGate integration

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice