NSE7_SOC_AR-7.6 · Question #18
Which two statements about the FortiAnalyzer Fabric topology are true? (Choose two.)
The correct answer is A. Downstream collectors can forward logs to Fabric members. D. Fabric members must be in analyzer mode. Downstream collectors can forward logs to Fabric members. This is correct because in the FortiAnalyzer Fabric topology, a FortiAnalyzer operating as a Collector can forward logs to an Analyzer before the data is synced to the supervisor. This means downstream collectors do…
Question
Which two statements about the FortiAnalyzer Fabric topology are true? (Choose two.)
Options
- ADownstream collectors can forward logs to Fabric members.
- BLogging devices must be registered to the supervisor.
- CThe supervisor uses an API to store logs, incidents, and events locally.
- DFabric members must be in analyzer mode.
How the community answered
(39 responses)- A79% (31)
- B13% (5)
- C8% (3)
Explanation
Downstream collectors can forward logs to Fabric members. This is correct because in the FortiAnalyzer Fabric topology, a FortiAnalyzer operating as a Collector can forward logs to an Analyzer before the data is synced to the supervisor. This means downstream collectors do forward logs to Fabric members, which then send information to the Fabric members must be in analyzer mode. This is true as well. Each FortiAnalyzer in Analyzer mode must be individually configured as a member to participate in the FortiAnalyzer Fabric. Members operate in analyzer mode to collect and forward logs to the supervisor.
Topics
Community Discussion
No community discussion yet for this question.