Which FortiGate in a Security Fabric sends togs to FortiAnalyzer?

Question

Options

• AOnly the root FortiGate.
• BEach FortiGate in the Security fabric.
• CThe FortiGate devices performing network address translation (NAT) or unified threat
• DOnly the last FortiGate that handled a session in the Security Fabric

• A
  8% (4)
• B
  75% (38)
• C
  14% (7)
• D
  4% (2)

Explanation

Option B is correct because each FortiGate in the Security Fabric can send logs to FortiAnalyzer for centralized logging and analysis. This allows you to monitor and manage the entire Security Fabric from a single console and view aggregated reports and dashboards. Option A is incorrect because the root FortiGate is not the only device that can send logs to FortiAnalyzer. The root FortiGate is the device that initiates the Security Fabric and acts as the central point of contact for other FortiGate devices. However, it does not have to be the only log source for FortiAnalyzer. Option C is incorrect because the FortiGate devices performing NAT or UTM are not the only devices that can send logs to FortiAnalyzer. These devices can perform additional security functions on the traffic that passes through them, such as firewall, antivirus, web filtering, etc. However, they are not the only devices that generate logs in the Security Fabric. Option D is incorrect because the last FortiGate that handled a session in the Security Fabric is not the only device that can send logs to FortiAnalyzer. The last FortiGate is the device that terminates the session and applies the final security policy. However, it does not have to be the only device that reports the session information to FortiAnalyzer.

No community discussion yet for this question.