ExamGecko
Question list
Search
Search

Question 25 - NSE5_FAZ-7.2 discussion

Report
Export

For which two purposes would you use the command set log checksum? (Choose two.)

A.
To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server
Answers
A.
To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server
B.
To prevent log modification or tampering
Answers
B.
To prevent log modification or tampering
C.
To encrypt log communications
Answers
C.
To encrypt log communications
D.
To send an identical set of logs to a second logging server
Answers
D.
To send an identical set of logs to a second logging server
Suggested answer: A, B

Explanation:

To prevent logs from being tampered with while in storage, you can add a log checksum using the config system global command. You can configure FortiAnalyzer to record a log file hash value, timestamp, and authentication code when the log is rolled and archived and when the log is uploaded (if that feature is enabled). This can also help against man-in-the-middle only for the transmission from FortiAnalyzer to an SSH File Transfer Protocol (SFTP) server during log upload.

FortiAnalyzer_7.0_Study_Guide-Online page 149

asked 18/09/2024
bijay ghimire
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first