MENU
Why is it important to enable event log storage on a system immediately after it is installed?
Suggested Answer: B
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
34 comments · newest first
DA
Dawne
10 months ago
I’m not sure about all this, is logging really that important?
LO
Louisa
11 months ago
Wait, D? Root kits out of the box? That’s wild!
CH
Chaya
11 months ago
C seems kinda irrelevant, not really the point here.
MA
Marylou
11 months ago
B makes sense too, gotta track abnormal behavior!
EL
Elin
11 months ago
Definitely A! Restoring to a good state is crucial.
EL
Elise
11 months ago
I vaguely recall something about root kits, but I don't think that's the primary reason for event logging. It feels like it's more about monitoring and incident response.
RO
Rosio
12 months ago
I feel like option C about comparing performance with other systems might not be the main reason for enabling logs right away. It seems more about security.
LA
Lasandra
12 months ago
I remember a practice question about incident response where logging helped differentiate between normal and abnormal behavior. That seems really important!
PA
Paulina
12 months ago
I think enabling event log storage is crucial for tracking any suspicious activity, but I'm not sure if it's mainly for restoring to a good state or for analyzing behavior.
LE
Leonie
12 months ago
I'm a bit confused by the wording of the question. Let me re-read it carefully and see if I can eliminate any of the options.
JA
Jaime
12 months ago
Enabling event log storage right away is crucial for monitoring and troubleshooting. Option B looks like the best choice here.
KA
Kattie
1 year ago
Hmm, not sure about this one. I'll need to think through the options and consider the security implications of event log storage.
IN
Ines
1 year ago
This seems like a straightforward security question. I'll focus on the importance of logging and incident response.
EV
Eveline
1 year ago
This seems like a pretty straightforward Scrum question. I'm pretty confident I can handle this one.
AL
Alecia
2 years ago
I'd say B is the way to go. Separate the normal from the abnormal - that's the key to incident response.
XE
Xenia
2 years ago
Haha, C? That's like comparing apples to oranges. Event logs are for security, not performance.
AN
Angelo
2 years ago
D is the one. Identifying rootkits is the top priority when setting up a new system.
DA
Dahlia
2 years ago
D) To identify root kits included on the system out of the box
TR
Truman
2 years ago
D) To identify root kits included on the system out of the box
MA
Magda
2 years ago
B) To create the ability to separate abnormal behavior from normal behavior during an incident
AM
Ammie
2 years ago
A) To allow system to be restored to a known good state if it is compromised
NA
Nan
2 years ago
B) To create the ability to separate abnormal behavior from normal behavior during an incident
LE
Lewis
2 years ago
A) To allow system to be restored to a known good state if it is compromised
JE
Jeannetta
2 years ago
I'd go with A. Restoring the system to a known good state is the best way to handle a compromise.
AR
Arlie
2 years ago
A and B both seem like important reasons to enable event log storage immediately.
AR
Arlie
2 years ago
I think B is also important, separating abnormal behavior can help in identifying incidents.
AR
Arlie
2 years ago
I agree, restoring to a known good state is crucial in case of a compromise.
NI
Niesha
2 years ago
I think enabling event log storage is crucial for security purposes, so I would go with option A as well.
WI
Wilda
2 years ago
Definitely B. Logging events is crucial to detect and investigate any suspicious activity on the system.
TO
Tonette
2 years ago
Definitely B. Logging events is crucial to detect and investigate any suspicious activity on the system.
CA
Cathern
2 years ago
B) To create the ability to separate abnormal behavior from normal behavior during an incident
MA
Matt
2 years ago
A) To allow system to be restored to a known good state if it is compromised
AL
Alayna
2 years ago
B) To create the ability to separate abnormal behavior from normal behavior during an incident
FL
Flo
2 years ago
A) To allow system to be restored to a known good state if it is compromised