For which two purposes would you use the command set log checksum? (Choose two.)

The set log checksum command enables a feature that calculates and records a checksum for each log file. The fundamental purpose of this is to ensure log integrity. This allows an administrator to verify that a log file has not been altered or tampered with after its creation, which is a critical security function (B).

This integrity verification mechanism also serves as a protective measure during log transfers. When logs are uploaded to a remote server, such as via SFTP, a man-in-the-middle attack could potentially modify the data in transit. By comparing the checksum of the received file against the original checksum logged by FortiAnalyzer, any unauthorized modification can be detected, thus helping to protect against such attacks (A).

C: Checksums provide data integrity, not confidentiality. Encryption is the technology used to make log communications unreadable.

D: Sending logs to a second logging server is a feature known as log forwarding, which is configured using separate commands and settings.

1. FortiAnalyzer Administration Guide 7.4.1

Page 110

"Log Security" section.

Quote: "FortiAnalyzer also supports log file checksums. When enabled

FortiAnalyzer calculates a checksum for each log file and logs the checksum value. You can use the checksum to verify log file integrity." This supports option B directly. The verification of integrity after a download or transfer implicitly protects against in-transit modification

supporting option A.

2. FortiAnalyzer CLI Reference 7.4.1

Page 261

config system log-setting.

Reference: The command set log-checksum {enable | disable} is documented here with the description "Enable/disable logging all log checksums." This confirms the command's existence and its role in enabling the checksum feature for logs.

3. FortiAnalyzer 7.4 Study Guide

Page 21

"Log Security".

Quote: "FortiAnalyzer also supports log file checksums. When enabled

FortiAnalyzer calculates a checksum for each log file and logs the checksum value. You can use the checksum to verify log file integrity." This reinforces that the core purpose is integrity verification (B)

which is the basis for detecting tampering from any source

including a MitM attack (A).