Fortinet
NSE8_812 · Question #44
You must analyze an event that happened at 20:37 UTC. date=2022-07-11 time=10:37:09 eventtime=165757829014946018 tz="-1000" logid="0000000022" type="traffic" subtype="forward" level="notice"…
The correct answer is D. 12:37:08. See the full explanation below for the reasoning.
Question
You must analyze an event that happened at 20:37 UTC. date=2022-07-11 time=10:37:09 eventtime=165757829014946018 tz="-1000" logid="0000000022" type="traffic" subtype="forward" level="notice" vd="root" srcintf="10.100.10.10" srcintfrole="lan" dstintf="wan1" dstintfrole="wan" dstip=8.8.8.8 dstport=53 dstnatip=0.0.0.0 FortiTaintfole="wan" srcuuid="94e63fcc-0124-51ed-728f-eae16990bb5c" dstuuid="2bd33fcc-0124-51ed-728f-eae16990bb5c" sessionid=27572 service="http" country="United States" action="accept" policyid=13 policytype="policy" policyname="LAB-to-WAN" user="testuser" group="testgroup" srcip=192.168.1.1 dstip=8.8.8.8 srcport=12345 dstport=80 useragent="Mozilla/5.0" appname="Network.Service" apprisk="elevated" appcat="Default" duration=180 sentbyte=45 rcvdbyte=120 sentpkt=1 rcvdpkt=1 vpnflow="none" masterd=0 logid=1010101010 pri_level=critical msg="Fortigate device initiated traffic" mastersrcmac="00:09:01:00:10:03:01" srcmac="00:09:01:00:10:03:01" srcserver=0 One log relevant to the event is extracted from FortiGate logs: The devices and the administrator are all located in different time zones Daylight savings time (DST) is disabled. - The FortiGate is at GMT-10:00 - The FortiAnalyzer is at GMT-08:00 - Your browser local time zone is at GMT-03:00 You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?
Options
- A20:37:00
- B10:37:08
- C12:37:08
- D12:37:08
How the community answered
(41 responses)- A10% (4)
- B2% (1)
- C7% (3)
- D80% (33)
Community Discussion
No community discussion yet for this question.