nerdexam
Fortinet

NSE5_FAZ-7.0 · Question #64

For which two purposes would you use the command set log checksum? (Choose two.)

The correct answer is A. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an B. To prevent log modification or tampering. To prevent logs from being tampered with while in storage, you can add a log checksum using the config system global command. You can configure FortiAnalyzer to record a log file hash value, timestamp, and authentication code when the log is rolled and archived and when the log…

Log and Data Policy

Question

For which two purposes would you use the command set log checksum? (Choose two.)

Options

  • ATo help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an
  • BTo prevent log modification or tampering
  • CTo encrypt log communications
  • DTo send an identical set of logs to a second logging server

How the community answered

(26 responses)
  • A
    81% (21)
  • C
    12% (3)
  • D
    8% (2)

Explanation

To prevent logs from being tampered with while in storage, you can add a log checksum using the config system global command. You can configure FortiAnalyzer to record a log file hash value, timestamp, and authentication code when the log is rolled and archived and when the log is uploaded (if that feature is enabled). This can also help against man-in-the-middle only for the transmission from FortiAnalyzer to an SSH File Transfer Protocol (SFTP) server during log

Topics

#log checksum#log integrity#man-in-the-middle protection#log tampering

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE5_FAZ-7.0 Practice