exam questions

Exam FCP_FAZ_AD-7.4 All Questions

View all questions & answers for the FCP_FAZ_AD-7.4 exam

Exam FCP_FAZ_AD-7.4 topic 1 question 48 discussion

Actual exam question from Fortinet's FCP_FAZ_AD-7.4
Question #: 48
Topic #: 1
[All FCP_FAZ_AD-7.4 Questions]

For which two purposes would you use the command set log-checksum? (Choose two.)

  • A. To encrypt log communications and data
  • B. To prevent log modification or tampering
  • C. To protect log data from man-in-the-middle attacks
  • D. To send an identical set of logs to a second logging server
Show Suggested Answer Hide Answer
Suggested Answer: BC 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ae0cbf3
1 month, 1 week ago
Selected Answer: BC
Correct answers are B and C: Study guide page 191: "To prevent logs from being tampered with while in storage, you can add a log checksum using the 'config system global' command. You can configure FortiAnalyzer to record a log file hash value, timestamp and authentication code when the log is rolled and archived and when the log is uploaded (if the feature is enabled). This can also help against Man-in-the-middle only for the transmission from FAZ to an SSH File Transfer Protocol (SFTP) server during log upload."
upvoted 1 times
...
jdubyah_
7 months, 2 weeks ago
Selected Answer: BC
Per page 191 in the Study Guide.
upvoted 1 times
...
rxn6
7 months, 3 weeks ago
Selected Answer: BC
B & C are correct, set log-checksum md5 is only for integrity
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...