Weekend Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ac4s65

Beta corporation is doing a core evaluation of its centralized logging capabilities.

GIAC GCCC Full Course Access
GIAC GCCC View All Questions

Beta corporation is doing a core evaluation of its centralized logging capabilities. The security staff suspects that the central server has several log files over the past few weeks that have had their contents changed. Given this concern, and the need to keep archived logs for log correction applications, what is the most appropriate next steps?

A.

Keep the files in the log archives synchronized with another location.

B.

Store the files read-only and keep hashes of the logs separately.

C.

Install a tier one timeserver on the network to keep log devices synchronized.

D.

Encrypt the log files with an asymmetric key and remove the cleartext version.

GCCC PDF/Engine
  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions
buy now GCCC pdf
Get 65% Discount on All Products, Use Coupon: "ac4s65"
Next
What documentation should be gathered and reviewed for evaluating an Incident Response program?
Which of the following is a responsibility of a change management board?
Previous