nerdexam
Fortinet

NSE5_FAZ-6.2 · Question #54

For which two purposes would you use the command set log checksum? (Choose two.)

The correct answer is A. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP B. To prevent log modification or tampering. Explanation/Reference: To prevent the log in the store from being modified, you can add a log checksum by using the config system global command. When the log is split, archived, and the log is uploaded (if the feature is enabled), you can configure the FortiAnalyzer to log the…

Log and Data Policy

Question

For which two purposes would you use the command set log checksum? (Choose two.)

Options

  • ATo help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP
  • BTo prevent log modification or tampering
  • CTo encrypt log communications
  • DTo send an identical set of logs to a second logging server

How the community answered

(42 responses)
  • A
    76% (32)
  • C
    10% (4)
  • D
    14% (6)

Explanation

Explanation/Reference: To prevent the log in the store from being modified, you can add a log checksum by using the config system global command. When the log is split, archived, and the log is uploaded (if the feature is enabled), you can configure the FortiAnalyzer to log the log file hash value, timestamp, and authentication code. This can help defend against man-in-the-middle attacks when uploading log transmission data from the FortiAnalyzer to the SFTP server.

Topics

#log checksum#log integrity#log tampering#SFTP upload

Community Discussion

No community discussion yet for this question.

Full NSE5_FAZ-6.2 Practice