CertNexus Exam CFR-410 Topic 7 Question 33 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 33
Topic #: 7

[All CFR-410 Questions]

A security administrator needs to review events from different systems located worldwide. Which of the

following is MOST important to ensure that logs can be effectively correlated?

ALogs should be synchronized to their local time zone.

BLogs should be synchronized to a common, predefined time source.

CLogs should contain the username of the user performing the action.

DLogs should include the physical location of the action performed.

Show Suggested Answer

Suggested Answer: A, B

by Kristin at Apr 30, 2024, 01:42 PM

Limited Time Offer

25%

Off

Get Premium CFR-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Natalie

13 hours ago

I agree, B is the way to go. Trying to keep track of time zones for every system would just give me a headache. Plus, what if one of the systems is off by a few minutes? Total chaos.

upvoted 0 times

...

Maryln

8 days ago

I see both points, but I think option C is also important. Having the username in the logs can help track down any suspicious activity.

upvoted 0 times

...

B) Logs should be synchronized to a common, predefined time source seems like the obvious choice here. How else are you going to correlate events across different systems? Trying to match up local time zones would be a nightmare.

upvoted 0 times

...

Alexia

10 days ago

I disagree, I believe option A is crucial. Synchronizing logs to their local time zone is essential for proper analysis.

upvoted 0 times

...

Chauncey

13 days ago

I think option B is the most important. It will help in correlating events accurately.

upvoted 0 times

...

CertNexus Exam CFR-410 Topic 7 Question 33 Discussion

Contribute your Thoughts:

Natalie

Maryln

Dorothea

Alexia

Chauncey