ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE5_FAZ-6.4 All Questions

View all questions & answers for the NSE5_FAZ-6.4 exam
Go to Exam

Exam NSE5_FAZ-6.4 topic 1 question 14 discussion

Actual exam question from Fortinet's NSE5_FAZ-6.4
Question #: 14
Topic #: 1
[All NSE5_FAZ-6.4 Questions]

Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)

  • A. In aggregation mode, you can forward logs to syslog and CEF servers as well.
  • B. Forwarding mode forwards logs in real time only to other FortiAnalyzer devices.
  • C. Aggregation mode stores logs and content files and uploads them to another FortiAnalyzer device at a scheduled time.
  • D. Both modes, forwarding and aggregation, support encryption of logs between devices.
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️
by Moustache_Boy at Aug. 15, 2023, 7 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Moustache_Boy
1 year, 8 months ago
Selected Answer: CD
Right answers C) FortiAnalyzer_7.0_Study_Guide-Online.pdf page 147: Aggregation: Logs and content files stored and uploaded at scheduled time. D) FortiAnalyzer_7.0_Study_Guide-Online.pdf page 148: The log communication between devices can be protected by encryption, with the desired encryption level, using the commands shown on the slide. (You need to interpret this. "Real time" and "aggregation" is about the "moment" when Fortigate sends the logs. However, no matter the moment, Fortigate will upload logs encrypted or unencrypted based on previous / differente config).
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago