Which two statements about Security Fabric communications are true? (Choose two.)

The Fortinet Security Fabric relies on the FortiTelemetry protocol for inter-device communication. To join a FortiGate to the fabric, the "Security Fabric Connection" (FortiTelemetry) must be explicitly enabled on the connecting interface of the downstream device. This is a manual configuration step. By default, the downstream FortiGate initiates this connection to the upstream (root) FortiGate. This communication uses the FortiTelemetry protocol, which operates over TCP on port 8013. This port can be customized, but 8013 is the default. The initial discovery of fabric members on the same broadcast domain, however, uses UDP port 8014.

A. FortiTelemetry operates over TCP (port 8013), but Neighbor Discovery uses UDP (port 8014) for broadcasting to find other fabric-capable devices.
B. The default port for FortiTelemetry (TCP 8013) can be modified, but the port for Neighbor Discovery (UDP 8014) is fixed and cannot be changed.

1. Fortinet FortiOS 7.6.0 Administration Guide

Security Fabric > Building the Security Fabric > Authorizing a device.

Page 10: "On the downstream FortiGate

edit the interface that connects to the upstream FortiGate. In Administrative Access

enable Security Fabric Connection." This confirms that FortiTelemetry must be manually enabled (Answer C).

Page 10: "The Security Fabric uses the FortiTelemetry protocol to communicate between devices. FortiTelemetry

also known as the Security Fabric connection

is established on the downstream device and initiated towards the upstream device. The connection is a TCP connection on port 8013." This confirms the default protocol

port

and connection direction (Answer D).

2. Fortinet FortiOS 7.6.0 Administration Guide

Security Fabric > Security Fabric settings.

Page 21: "FortiGate devices can discover each other using UDP port 8014." This confirms that Neighbor Discovery uses UDP

making option A incorrect. It also implies the port is a standard

not a configurable one

which supports why option B is incorrect.