nerdexam
Fortinet

NSE5_FAZ-7.2 · Question #41

Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

The correct answer is B. Log fetching can be done only on two FortiAnalyzer devices that are running the same firmware D. Log fetching allows the administrator to run queries and reports against historical data by. Using FortiAnalyzer, you can enable log fetching. This allows FortiAnalyzer to fetch the archived logs of specified devices from another FortiAnalyzer, which you can then run queries or reports on for forensic analysis. The FortiAnalyzer device that fetches logs operates as the…

Log and Data Policy

Question

Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)

Options

  • AA FortiAnalyzer device can perform either the fetch server or client role, and it can perform two
  • BLog fetching can be done only on two FortiAnalyzer devices that are running the same firmware
  • CLog fetching allows the administrator to fetch analytics logs from another FortiAnalyzer for
  • DLog fetching allows the administrator to run queries and reports against historical data by

How the community answered

(68 responses)
  • A
    6% (4)
  • B
    81% (55)
  • C
    13% (9)

Explanation

Using FortiAnalyzer, you can enable log fetching. This allows FortiAnalyzer to fetch the archived logs of specified devices from another FortiAnalyzer, which you can then run queries or reports on for forensic analysis. The FortiAnalyzer device that fetches logs operates as the fetch client, and the other FortiAnalyzer device that sends logs operates as the fetch server. Log fetching can happen only between two FortiAnalyzer devices, and both of them must be running the same firmware version. A FortiAnalyzer device can perform either the fetch server or client role, and it can perform two roles at the same time with different FortiAnalyzer devices at the other end.

Topics

#log fetching#FortiAnalyzer-to-FortiAnalyzer#historical data#firmware compatibility

Community Discussion

No community discussion yet for this question.

Full NSE5_FAZ-7.2 Practice