NSE5_FAZ-6.2 · Question #54
For which two purposes would you use the command set log checksum? (Choose two.)
The correct answer is A. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP B. To prevent log modification or tampering. Explanation/Reference: To prevent the log in the store from being modified, you can add a log checksum by using the config system global command. When the log is split, archived, and the log is uploaded (if the feature is enabled), you can configure the FortiAnalyzer to log the…
Question
For which two purposes would you use the command set log checksum? (Choose two.)
Options
- ATo help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP
- BTo prevent log modification or tampering
- CTo encrypt log communications
- DTo send an identical set of logs to a second logging server
How the community answered
(42 responses)- A76% (32)
- C10% (4)
- D14% (6)
Explanation
Explanation/Reference: To prevent the log in the store from being modified, you can add a log checksum by using the config system global command. When the log is split, archived, and the log is uploaded (if the feature is enabled), you can configure the FortiAnalyzer to log the log file hash value, timestamp, and authentication code. This can help defend against man-in-the-middle attacks when uploading log transmission data from the FortiAnalyzer to the SFTP server.
Topics
Community Discussion
No community discussion yet for this question.