For which two purposes would you use the command set log checksum? (Choose two.)

For which two purposes would you use the command set log checksum? (Choose two.)
A . To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server
B . To prevent log modification or tampering
C . To encrypt log communications
D . To send an identical set of logs to a second logging server

View Answer

Answer: A, B

Explanation:

To prevent logs from being tampered with while in storage, you can add a log checksum using the config

system global command. You can configure FortiAnalyzer to record a log file hash value, timestamp, and

authentication code when the log is rolled and archived and when the log is uploaded (if that feature is

enabled). This can also help against man-in-the-middle only for the transmission from FortiAnalyzer to an

SSH File Transfer Protocol (SFTP) server during log upload.

FortiAnalyzer_7.0_Study_Guide-Online page 149