3.4 Recommend Strata Logging Service Log Forwarding Methods and Integrations (e.g., Syslog over TLS, HTTP, Email) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What format are logs typically sent in when using HTTP forwarding to Strata Logging Service?

   • ACSV
   • BBinary
   • CXML
   • DJSON
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security architect is configuring syslog over TLS forwarding from SLS to a SIEM. The SIEM requires mutual TLS (mTLS) authentication, meaning both the SIEM server and the firewall client must present certificates. What additional configuration is required on the firewall beyond the standard syslog over TLS setup?

   • AUpload the SIEM's CA certificate to the firewall's trusted CA list.
   • BUpload a client certificate and its private key to the firewall for use in the TLS handshake.
   • CDisable certificate validation on the firewall to allow the mTLS handshake.
   • DConfigure the firewall to use a pre-shared key instead of certificates for mTLS.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which forwarding method is commonly used to integrate Strata Logging Service with a third-party SIEM?

   • ASyslog over TLS
   • BSNMP traps
   • CFTP
   • DEmail
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary use case for email-based log forwarding in Strata Logging Service?

   • ADelivering alerts and summary reports
   • BSending real-time, high-volume log streams
   • CIntegrating with SIEM platforms
   • DStoring logs for long-term archival
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company wants to use SLS email forwarding for critical alerts. The security team is concerned about the reliability of email delivery and wants to ensure alerts are not missed. The architect must recommend a configuration that improves reliability. What should the architect recommend?

   • AConfigure syslog over TLS forwarding to a log collector that generates email alerts.
   • BConfigure email forwarding to a single recipient and rely on the SMTP server's retry mechanism.
   • CConfigure multiple email recipients in the forwarding profile so that alerts are sent to several addresses.
   • DConfigure HTTP forwarding to a webhook that sends email notifications.
   Reveal Solution Discussion Select an answer first