Configure Logging and Alert Mechanisms NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A government agency requires a monthly compliance report that summarizes all DDoS attacks detected by FortiDDoS. The report must be generated on the first day of each month and emailed to the compliance officer. The administrator has already created a custom report template. What should the administrator do next?

   • AEnable debug logging to capture all attack data and compile the report manually.
   • BConfigure the report schedule to run monthly on the first day and set the compliance officer's email as the recipient.
   • CConfigure a syslog forwarder to send the report data to the compliance officer's email.
   • DManually generate the report on the first day of each month and email it to the compliance officer.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which part of an alert email on FortiDDoS typically contains a summary of the event that triggered the alert?

   • ASubject line
   • BEmail header
   • CSMTP envelope
   • DAttachment file name
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A university's network team uses FortiDDoS to protect its campus network. The IT director wants a weekly report summarizing the top 10 attack types and their sources, delivered every Monday morning to the security team. The report should cover the previous week's data. What should the administrator configure?

   • ACreate a custom report using the attack log data source, set the time range to 'Last 7 days', and schedule it to run every Monday.
   • BUse the default report template and schedule it to run daily, then have the security team manually filter for top attacks.
   • CEnable debug logging to capture detailed attack data and then manually compile the report each week.
   • DConfigure a syslog forwarder to send all logs to an external reporting tool that generates the weekly summary.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A small business uses FortiDDoS and wants to keep logs locally for 30 days for basic troubleshooting. They also want to send logs to a free online syslog service for additional analysis. The administrator is concerned about the cost of the service. What should the administrator do?

   • AEnable debug logging to capture more details and store logs locally for 30 days.
   • BIncrease local retention to 90 days and disable remote logging to save bandwidth.
   • CConfigure local logging with a 30-day retention period and set up remote logging to the free syslog service.
   • DDisable local logging and rely solely on the free syslog service for all log storage.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   To configure email alerts on FortiDDoS, which of the following must be specified in the SMTP settings?

   • ASMTP server address and port
   • BSyslog server IP and protocol
   • CReport delivery frequency
   • DLog retention period
   Reveal Solution Discussion Select an answer first