NSE 5 – FortiAnalyzer 6.2 — Question 8

How are logs forwarded when FortiAnalyzer is configured to use aggregation mode?

Answer options

• A. Logs are forwarded as they are received.
• B. Logs are forwarded as they are received and content files are uploaded at a scheduled time.
• C. Logs and content files are stored and uploaded at a scheduled time.
• D. Logs and content files are forwarded as they are received.

Correct answer: D

Explanation

The correct answer is D because in aggregation mode, both logs and content files are transmitted as they are received, ensuring real-time data flow. Options A and B only partially describe the process, while C indicates that uploads occur at scheduled times, which is incorrect in this mode.