Configure Logging and Alert Mechanisms NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 7)

Questions 31–32

1. 31application · medium

   A managed security service provider (MSSP) operates FortiDDoS devices for multiple clients. They need to retain logs locally on each device for 90 days to meet compliance, but they also want to forward a real-time stream of all logs to a central SIEM for immediate analysis. The local disk on each FortiDDoS is limited. What should the administrator configure?

   • AIncrease local log rotation frequency to keep only 30 days of logs and send daily summary reports to the SIEM.
   • BSet local log retention to 90 days and configure a remote syslog server to receive all logs in real time.
   • CConfigure FortiAnalyzer to store logs remotely and disable local logging to save disk space.
   • DDisable local logging and rely solely on the SIEM for log storage and analysis.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is typically included in the body of a FortiDDoS alert email?

   • AThe FortiDDoS firmware version
   • BDetailed log entries related to the alert
   • CThe SMTP server's IP address
   • DThe recipient's email password
   Reveal Solution Discussion Select an answer first