ExamGecko
Question list
Search
Search

Question 27 - NSE5_FSM-6.3 discussion

Report
Export

In me FortiSIEM CLI. which command must you use to determine whether or not syslog is being received from a network device?

A.
tcpdump
Answers
A.
tcpdump
B.
OphSyslogRecorder
Answers
B.
OphSyslogRecorder
C.
Onetcat
Answers
C.
Onetcat
D.
phDeviceTest
Answers
D.
phDeviceTest
Suggested answer: A

Explanation:

Syslog Reception Verification: To verify whether syslog messages are being received from a network device, a network packet capture tool can be used.

tcpdump Command: tcpdump is a powerful command-line packet analyzer tool available in Unix-like operating systems. It allows administrators to capture and analyze network traffic.

Usage: By using tcpdump with the appropriate filters (e.g., port 514 for syslog), administrators can monitor the incoming syslog messages in real-time to verify if they are being received.

Example Command: tcpdump -i <interface> port 514 captures the syslog messages on the specified network interface.

Reference: FortiSIEM 6.3 User Guide, CLI Commands section, which details the usage of tcpdump for network traffic analysis and verification of syslog reception.

asked 18/09/2024
Alonzo M. Carr Sr.
24 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first