Exam FCP_FAZ_AD-7.4 topic 1 question 17 discussion

It is important to understand that there are two right answers but one is only partly right. A and D both with verify the integrity by using the hash however, the question includes the md5-auth portion. The Auth tells me that the question is asking you to define the difference between the md5 command and the md5-auth command. A. is correct because the command sets the hash and authentication code due to the md5-auth portion of the command. B. is incorrect because encyrption is different than the checksum encryption concerns log security Checksums involve the hash which confirms integrity. C. is incorrect because OFTP process involves encryption and the transfer of data not the integrity of it. D. is incorrect but only partly, the addition of the -auth adds the authentication code. Without the auth then it would only verify the integrity.

---According to Fortinet, the correct answer is A. MD5: Record the log file's MD5 hash value only. MD5-auth: Record the log file's MD5 hash value and authentication code. configure system global set log-checksum {md5 | md5-auth | none} end

MD5-auth: Record the log file's MD5 hash value and authentication code.

I tought it was D, but looking at: docs.fortinet.com/document/fortianalyzer/7.6.1/administration-guide/410387/appendix-b-log-integrity-and-secure-log-transfer it is A. A is correct.

Per page 191 of the Study Guide.

A is correct.

Study Guide page 191, "To prevent logs from being tamperd (...)"

Study Guide page 191, "To prevent logs from being tamperd (...)" - so I'd go with A, anti-tampering has to do with integrity

El comando set log-checksum md5-auth se utiliza para generar un valor de hash que permita verificar la integridad de los archivos de registro. Este mecanismo asegura que los registros no hayan sido alterados desde que fueron generados.

A is correct,

Page 191 of the Study Guide