A security administrator needs to review events from different systems located worldwide.

CertNexus CFR-410 Question Answer

A security administrator needs to review events from different systems located worldwide. Which of the

following is MOST important to ensure that logs can be effectively correlated?

Logs should be synchronized to their local time zone.

Logs should be synchronized to a common, predefined time source.

Logs should contain the username of the user performing the action.

Logs should include the physical location of the action performed.

CFR-410 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"