ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE5_FAZ-6.2 All Questions

View all questions & answers for the NSE5_FAZ-6.2 exam
Go to Exam

Exam NSE5_FAZ-6.2 topic 1 question 26 discussion

Actual exam question from Fortinet's NSE5_FAZ-6.2
Question #: 26
Topic #: 1
[All NSE5_FAZ-6.2 Questions]

Which two statements about log forwarding are true? (Choose two.)

  • A. Forwarded logs cannot be filtered to match specific criteria.
  • B. Logs are forwarded in real-time only.
  • C. The client retains a local copy of the logs after forwarding.
  • D. You can use aggregation mode only with another FortiAnalyzer.
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️
by vagedis at Nov. 4, 2021, 7:30 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Hamoly
2 years, 11 months ago
Selected Answer: CD
CD is correct
upvoted 2 times
...
coredpt
3 years, 4 months ago
Selected Answer: CD
C and D, agregation is possible only with another FAZ
upvoted 2 times
...
Deco123
3 years, 5 months ago
CD - FAZ 6.4 Study Guide, page 137
upvoted 1 times
...
vagedis
3 years, 5 months ago
www.fortinetguru.com/2020/07/log-forwarding-fortianalyzer-fortios-6-2-3/ In addition to forwarding logs to another unit or server, the client retains a local copy of the logs. The local copy of the logs is subject to the data policy settings for archived logs. See Log storage on page 21 for more information. + FortiAnalyzer supports log forwarding in aggregation mode only between two FortiAnalyzer units. Syslog and CEF servers are not supported.
upvoted 2 times
...
vagedis
3 years, 5 months ago
C&D are correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago