exam questions

Exam FCP_FAZ_AD-7.4 All Questions

View all questions & answers for the FCP_FAZ_AD-7.4 exam

Exam FCP_FAZ_AD-7.4 topic 1 question 39 discussion

Actual exam question from Fortinet's FCP_FAZ_AD-7.4
Question #: 39
Topic #: 1
[All FCP_FAZ_AD-7.4 Questions]

Which two statements are true about FortiAnalyzer log forwarding modes? (Choose two.)

  • A. Both modes, forwarding and aggregation, send logs as soon as they are received.
  • B. Aggregation mode requires two FortiAnalyzer devices.
  • C. Forwarding mode forwards logs to other FortiAnalyzer devices, syslog servers, or CEF servers.
  • D. Forwarding mode requires configuration on the server side.
Show Suggested Answer Hide Answer
Suggested Answer: BC 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
jdubyah_
3 weeks ago
Selected Answer: BC
Page 189 in the Study Guide.
upvoted 1 times
...
rxn6
3 weeks, 6 days ago
Selected Answer: BC
Sorry, B & C
upvoted 2 times
...
SmilinJoe
3 weeks, 6 days ago
Selected Answer: BC
A. incorrect - B. correct - pg. 189 "Log forwarding can run in modes other than aggregation mode, which is only applicable between two Forti Analyzer devices". C. correct - pg. 189 "In forwarding mode, FAZ can also forward logs in real-time mode to a syslog server, CEF server or another FAZ". D. incorrect - pg.189 "Forwarding mode only requires configuration on the client side".... not the server.
upvoted 2 times
...
rxn6
4 weeks ago
Selected Answer: BD
B and D are correct. Forwarding mode only requires configuration on the client side, as per Fortinet Docs. Aggregation Mode is only supported between two FortiAnalyzer devices, Admin Guide p. 188
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago