FCP_FAZ_AD-7.4 · Question #64
For which two purposes would you use the command set log checksum? (Choose two.)
The correct answer is A. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an B. To prevent log modification or tampering. To prevent logs from being tampered with while in storage, you can add a log checksum using the config system global command. You can configure FortiAnalyzer to record a log file hash value, timestamp, and authentication code when the log is rolled and archived and when the log…
Question
For which two purposes would you use the command set log checksum? (Choose two.)
Options
- ATo help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an
- BTo prevent log modification or tampering
- CTo encrypt log communications
- DTo send an identical set of logs to a second logging server
How the community answered
(31 responses)- A81% (25)
- C6% (2)
- D13% (4)
Explanation
To prevent logs from being tampered with while in storage, you can add a log checksum using the config system global command. You can configure FortiAnalyzer to record a log file hash value, timestamp, and authentication code when the log is rolled and archived and when the log is uploaded (if that feature is enabled). This can also help against man-in-the-middle only for the transmission from FortiAnalyzer to an SSH File Transfer Protocol (SFTP) server during log
Topics
Community Discussion
No community discussion yet for this question.