FCP – FortiAnalyzer Administrator 7.4 — Question 9

Which statement about the communication between FortiGate high availability (HA) clusters and FortiAnalyzer is true?

Answer options

• A. If devices were registered to FortiAnalyzer before forming a cluster, you can manually add them together.
• B. FortiAnalyzer distinguishes each cluster member by the IP addresses in log message headers.
• C. If the HA primary device becomes unavailable, you must remove it from the HA cluster list on FortiAnalyzer.
• D. The FortiGate HA cluster must be in active-passive mode in order to avoid conflict.

Correct answer: A

Explanation

The correct answer is A because if devices were already registered to FortiAnalyzer before the HA cluster was created, you have the option to manually add them together. Option B is incorrect as FortiAnalyzer does not use IP addresses in log message headers to distinguish cluster members. Option C is wrong because the primary device does not need to be removed from the HA cluster list on FortiAnalyzer if it becomes unavailable. Option D is also incorrect since the HA cluster can operate in both active-active and active-passive modes without necessarily causing conflicts.