Configure Logging and Alert Mechanisms NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   When setting up email alerts in FortiDDoS, what is the purpose of specifying recipient addresses?

   • ATo define who will receive the alert emails
   • BTo select which events trigger alerts
   • CTo specify the log format for alerts
   • DTo set the SMTP server's authentication credentials
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A large e-commerce platform uses FortiDDoS to protect its infrastructure. The security team wants to receive email alerts for high-severity attacks, but they are concerned about alert fatigue from low-severity events. They also want the alerts to include the attack vector and the affected IP range. The SMTP server is configured. What should the administrator do to balance alerting and detail?

   • ACreate multiple email alert rules, each with a specific severity threshold and customized subject/body including attack vector and IP range.
   • BEnable all email alerts and rely on the security team to filter through them.
   • CConfigure a single email alert rule for all events and include the attack vector and IP range in the body.
   • DSet the email alert to trigger only on 'Critical' severity and include the attack vector in the subject.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When creating a custom report in FortiDDoS, which of the following can be selected to define the data that the report will include?

   • ALog rotation size
   • BData sources
   • CDebug log level
   • DSMTP server settings
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a typical characteristic of debug logs compared to regular logs?

   • AThey are stored in a separate database
   • BThey contain more detailed information
   • CThey are automatically sent to FortiAnalyzer
   • DThey are always enabled by default
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company uses FortiDDoS and wants to send logs to a remote syslog server for compliance. The syslog server is on a different subnet and requires a specific port. The administrator has configured the remote logging settings, but logs are not appearing on the syslog server. What should the administrator check first?

   • ACheck the local log retention policy to ensure logs are not being overwritten.
   • BEnable debug logging to capture more details about the syslog transmission.
   • CConfigure email alerts to notify when syslog forwarding fails.
   • DVerify that the syslog server IP address and port are correctly configured in FortiDDoS.
   Reveal Solution Discussion Select an answer first