NSE 4 – FortiGate 5.4 — Question 16

An administrator needs to offload logging to FortiAnalyzer from a FortiGate with an internal hard drive. Which statements are true? (Choose two.)

Answer options

• A. Logs must be stored on FortiGate first, before transmitting to FortiAnalyzer
• B. FortiGate uses port 8080 for log transmission
• C. Log messages are transmitted as plain text in LZ4 compressed format (store-and-upload method).
• D. FortiGate can encrypt communications using SSL encrypted OFTP traffic.

Correct answer: A, C

Explanation

The correct answers are A and C because logs must first be stored on the FortiGate before they can be sent to FortiAnalyzer, and they are transmitted in a compressed format. Option B is incorrect as FortiGate does not use port 8080 for log transmission, while option D is not relevant to the logging process described.