nerdexam
Fortinet

NSE7_SOC_AR-7.6 · Question #13

When configuring a FortiAnalyzer to act as a collector device, which two steps must you perform? (Choose two.)

The correct answer is B. Configure log forwarding to a FortiAnalyzer in analyzer mode. D. Configure Fabric authorization on the connecting interface. Configure log forwarding to a FortiAnalyzer in analyzer mode. The collector must be set up to forward logs to a FortiAnalyzer operating in analyzer mode by specifying the remote server type as FortiAnalyzer and the server IP address of the analyzer. Configure Fabric…

FortiAnalyzer Deployment and Configuration

Question

When configuring a FortiAnalyzer to act as a collector device, which two steps must you perform? (Choose two.)

Options

  • AEnable log compression.
  • BConfigure log forwarding to a FortiAnalyzer in analyzer mode.
  • CConfigure the data policy to focus on archiving.
  • DConfigure Fabric authorization on the connecting interface.

How the community answered

(53 responses)
  • A
    19% (10)
  • B
    72% (38)
  • C
    9% (5)

Explanation

Configure log forwarding to a FortiAnalyzer in analyzer mode. The collector must be set up to forward logs to a FortiAnalyzer operating in analyzer mode by specifying the remote server type as FortiAnalyzer and the server IP address of the analyzer. Configure Fabric authorization on the connecting interface. For additional security, enabling collector authorization requires that the collector be authorized by an admin in the analyzer before forwarding data. This is done by enabling collector-auth and authorizing the collector device in the analyzer's Device Manager.

Topics

#collector mode#log forwarding#Fabric authorization#FortiAnalyzer deployment

Community Discussion

No community discussion yet for this question.

Full NSE7_SOC_AR-7.6 Practice