ExamGecko
Question list
Search
Search

Question 23 - FCP_FAZ_AD-7.4 discussion

Report
Export

Which two statements regarding FortiAnalyzer log forwarding modes are true? (Choose two.)

A.

Both modes, forwarding and aggregation, support encryption of logs between devices.

Answers
A.

Both modes, forwarding and aggregation, support encryption of logs between devices.

B.

In aggregation mode, you can forward logs to syslog and CEF servers.

Answers
B.

In aggregation mode, you can forward logs to syslog and CEF servers.

C.

Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.

Answers
C.

Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.

D.

Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.

Answers
D.

Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.

Suggested answer: A, D

Explanation:

Both modes, forwarding and aggregation, support encryption of logs between devices.

Both forwarding and aggregation modes can use encryption to securely transfer logs between FortiAnalyzer devices.

Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.

In aggregation mode, logs are stored and then transferred to another FortiAnalyzer at a scheduled time, rather than in real-time. This mode is typically used when consolidating logs from multiple devices into a central FortiAnalyzer.

The other options are incorrect because:

Forwarding mode sends logs in real-time but not exclusively to other FortiAnalyzer devices; it can also send logs to external systems like syslog servers.

Aggregation mode is primarily for consolidating logs to another FortiAnalyzer and doesn't focus on forwarding logs to syslog or CEF servers.

asked 10/10/2024
soliman sallam
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first