Test
Logging and monitoring II
Preguntas del test (22)
1Unified event correlation and risk management
Collect, parse, normalize, index. and store security logs- AFortiSIEM
- BFortiAnalyzer
- CFortiManager
2Hosted subscription-based service
Long—term log storage and reporting
Bound to Fortinet Support account
FortiGate includes a free tier- AFortiCloud
- BFortiSIEM
- CFortiAnalyzer
3Long term, dedicated storage of log data
Reports
Log limit dependent on model- AFortiAnalyzer
- BFortiSIEM
- CSyslog
4Logging server
Central repository for networked devices
Consolidates logs- AFortiSIEM
- BFortiAnalyzer
- CSyslog
5Like FortiAnalyzer. can also store logs and generate reports, but has fixed amount per day that is less than equivalent size FortiAnalyzer
Primary purpose: central administrative management of networked devices- AFortiManager
- BFortiSIEM
- CFortiCloud
6Configure logging options: (select 4)
- Astore-and-upload (CLI configuration only)
- BReal time
- CEvery Minute
- DEvery 5 Minutes (default)
- Estore-and-download (CLI configuration only)
- FEvery 10 Minutes (default)
- GEvery 30 seconds
7By default, if the FortiAnaIyzer disk is full, the oldest logs never are overwritten. However, you can configure FortiAnalyzer to stop logging.
- AVerdadero
- BFalso
8Fortigate uses ___ for log transmission
- AUDP 514 or TCP 514
- BUDP 415 or TCP 415
9If using reliable logging, you can encrypt communications using
- ASSL—secured OFTP (OFTPS).
- BSSL—secured FTPS (FTPS)
- CSSL—secured FIPS (FIPS).
10The primary purpose of which device is to store and analyze logs?
- AA. FortiAnaIyzer
- BB. FortiManager
11What protocol does FortiGate use to send encrypted logs to FortiAnalyzer?
- AA. OFTPS
- BB. SSL
12If you enable reliable logging, which transport protocol will FortiGate use?
- AA. UDP
- BB. TCP
13Hiding user names in logs:
- A# config log setting
set user-anonymize enable
end - B# config log
edit setting
set user-anonymous enable
end
- A# config log setting
14What setting on your firewall policy must you enable to generate logs on traffic sent through that firewall policy?
- AA. Log Allowed Traffic
- BB. Event Logging
15Which log type can generate a large number of logs and is therefore disabled by default?
- AA. Local Traffic Log
- BB. Event Logging
16What effect does the CLI command set user—anonymize enable have on traffic and UTM logs?
- AA. Sets the user name in the logs to “anonymous”
- BB. Sets the user IP in the logs to ¨N/A¨
17True or False? Menu items that display under Log & Report depend on the incoming logs.
- AA. True
- BB. False
18On the FortiGate GUI, log can help you find a specific log entry more efficiently.
- AA. details
- BB. filters
19With email alerts, you can trigger alert emails based on or log severity level.
- AA. event
- BB. threat weight
20What happens when logs roll?
- AA. It lowers the space requirements needed to contain those logs.
- BB. They are uploaded to an FTP server.
21When you download logs on the GUI,...
- AA. all logs in the SQL database are downloaded.
- BB. only your current View, including any filters set, are downloaded.
22What does the following CLI command do?
config log disk setting
set upload enable- AA. Configures rolled logs to upload to an FTP server
- BB. Configures rolled logs to upload to any external logging device
Información
- Descripción
- NSE4 6.0 NSE4 6.0 Test sobre Logging and monitoring II, creado por Marcos Avila el 14/09/2018.
- Autor
- Marcos Avila
- Idioma
- Español
- Visitas
- 760
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test