ExamGecko
Search Search Login
Home Home / Fortinet / FCP_FAZ_AD-7.4
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which two statements regarding FortiAnalyzer log forwarding modes are true? (Choose two.)
Refer to the exhibit. Which image corresponds to the packet capture shown in the exhibit? A) B) C) D)
What does the disk status Degraded mean for RAID management?
Refer to the exhibit. The exhibit shows the creation of a new administrator on FortiAnalyzer. The new account uses the credentials stored on an LDAP server. Why would an administrator configure a password for this account?
What are offline logs on FortiAnalyzer?
What is the purpose of the FortiAnalyzer command diagnose system print netstat?
Which two statements about deleting ADOMs are true? (Choose two.)
Which two parameters are used to calculate the Total Quota value available on FortiAnalyzer? (Choose two.)
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate on FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
An administrator has moved a FortiGate device from the root ADOM to ADOM1. Which two statements are true regarding logs? (Choose two.)

Question 11 - FCP_FAZ_AD-7.4 discussion

Report
Export

In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?

A.

The traffic destination is another FortiGate in the fabric.

Answers
A.

The traffic destination is another FortiGate in the fabric.

B.

The upstream FortiGate is configured to do NAT

Answers
B.

The upstream FortiGate is configured to do NAT

C.

Log redundancy is configured in the fabric.

Answers
C.

Log redundancy is configured in the fabric.

D.

The downstream device cannot connect to FortiAnalyzer.

Answers
D.

The downstream device cannot connect to FortiAnalyzer.

Suggested answer: B

Explanation:

When the upstream FortiGate is performing Network Address Translation (NAT), it creates new session entries for traffic passing through it. As a result, it generates its own traffic logs for those sessions, even if the sessions were initiated on a downstream FortiGate. This is because the upstream FortiGate is altering the source IP address, making it responsible for tracking the session details.

Show Answer
asked 10/10/2024
Roger Warner
33 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms