NSE 5 – FortiAnalyzer 6.2 — Question 19

Which two statements about log forwarding are true? (Choose two.)

Answer options

• A. Forwarded logs cannot be filtered to match specific criteria.
• B. Logs are forwarded in real-time only.
• C. The client retains a local copy of the logs after forwarding.
• D. You can use aggregation mode only with another FortiAnalyzer.

Correct answer: C, D

Explanation

Option C is correct because the client does maintain a local copy of logs after they are forwarded. Option D is also accurate as aggregation mode is specifically designed to work in conjunction with another FortiAnalyzer. Options A and B are incorrect as logs can be filtered based on criteria and may not only be forwarded in real-time.