Which of the following represents the BEST option for addressing this concern?

An incident response team is concerned with verifying the integrity of security information and event management (SIEM) events after being written to disk.

Which of the following represents the BEST option for addressing this concern?
A . Time synchronization
B. Log hashing
C. Source validation
D. Field name consistency

View Answer

Answer: A

Explanation:

Reference: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-92.pdf