Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with IPsec? (Choose two.)
Correct Answer: A,C
Question 52
Refer to Exhibit: Client-1 is trying to access the internet for web browsing. All FortiGate devices in the topology are part of a Security Fabric with logging to FortiAnalyzer configured. All firewall policies have logging enabled. All web filter profiles are configured to log only violations. Which statement about the logging behavior for this specific traffic flow is true?
Correct Answer: C
The topology shows a Security Fabric setup involving FortiGate devices (FGT-A and FGT-B) and a FortiAnalyzer for centralized logging. Let's break down the logging and traffic flow behavior: * Traffic Flow Analysis: * Client-1initiates web traffic directed to the internet, which is routed throughFGT-Band thenFGT- Abefore reaching the internet. This is indicated by the direction of the red-dashed arrow from Client-1 through FGT-B to FGT-A. * Policy and NAT Settings: * OnFGT-B, NAT is disabled, meaning it will pass the traffic through without altering the source IP. This device has a Web Filter enabled with a policy to log violations only. * OnFGT-A, NAT is enabled, and a Web Filter profile is also applied. Like FGT-B, it logs only violations for web filtering. * Logging Behavior: * Since both FortiGate devices have logging enabled for traffic and web filtering, they can create logs if conditions are met. * FGT-Bwill log all traffic, as per its configuration, and will also create web filter logs if it detects a violation, as the web filter profile is applied. Because NAT is disabled on FGT-B, it processes the traffic but doesn't perform any address translation, allowing it to see the original source IP of Client-1. * FGT-A, as the Security Fabric root, will handle NAT and forward the traffic to the internet. However, in this case, the question is focused on where the traffic and web filter logs would be generated first, particularly by FGT-B. * Option Analysis: * Option A - Only FGT-B will create traffic logs: This is incorrect because FGT-B can create both traffic logs and web filter logs if it detects a violation. * Option B - FGT-B will see the MAC address of FGT-A and notify FGT-A to log: This is not how logging works in this setup. Each FortiGate logs independently based on configured policies. * Option C - FGT-B will create traffic logs and will create web filter logs if it detects a violation: This is correct, as FGT-B has logging enabled and will log traffic and web filter violations. * Option D - Only FGT-A will create web filter logs if it detects a violation: This is incorrect, as FGT-B can also log web filter violations independently. Conclusion: * Correct Answer:C. FGT-B will create traffic logs and will create web filter logs if it detects a violation. * FGT-B is responsible for logging the traffic from Client-1 and will generate web filter logs if there is a policy violation, as configured. References: * FortiOS 7.4.1 documentation on Security Fabric logging behavior and FortiAnalyzer log integration.
Question 53
Which statements are true of Administrative Domains (ADOMs) in FortiAnalyzer? (Choose two.)
