Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

The correct answer is C. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device D. Both modes, forwarding and aggregation, support encryption of logs between devices. Aggregation mode is only supported between two FortiAnalyer devices, so A is wrong. Forwarding is always in real time and does not ONLY forward to other FortiAnalyzer devices. It also forwards to Syslog/CEF. B is wrong.

Log and Data Policy

Question

Options

AIn aggregation mode, you can forward logs to syslog and CEF servers as well.
BForwarding mode forwards logs in real time only to other FortiAnalyzer devices.
CAggregation mode stores logs and content files and uploads them to another FortiAnalyzer device
DBoth modes, forwarding and aggregation, support encryption of logs between devices.

How the community answered

(49 responses)

A
14% (7)
B
8% (4)
C
78% (38)

Explanation

Aggregation mode is only supported between two FortiAnalyer devices, so A is wrong. Forwarding is always in real time and does not ONLY forward to other FortiAnalyzer devices. It also forwards to Syslog/CEF. B is wrong.

Topics

#log forwarding#aggregation mode#log encryption#real-time forwarding

Community Discussion

No community discussion yet for this question.

Full NSE5_FAZ-7.0 Practice