Which of the following is MOST important to ensure that logs can be effectively correlated?

A security administrator needs to review events from different systems located worldwide.

Which of the following is MOST important to ensure that logs can be effectively correlated?
A . Logs should be synchronized to their local time zone.
B. Logs should be synchronized to a common, predefined time source.
C. Logs should contain the username of the user performing the action.
D. Logs should include the physical location of the action performed.

Answer: A

Latest CFR-410 Dumps Valid Version with 100 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments