MENU
An organization wants to enable the correlation and analysis of security-related events and other recorded data and to support investigations into information security incidents. Which control should it implement?
Suggested Answer: A
Get Premium ISO-IEC-27001-Lead-Implementer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
26 comments · newest first
IS
Isabella
10 months ago
Agreed, correlation is crucial for effective incident response!
LA
Latrice
11 months ago
Surprised that software installation is even an option here.
WE
Wendell
11 months ago
Clock synchronization? Not sure how that helps with security incidents.
LE
Leanna
11 months ago
I think privileged utility programs are key for this!
PE
Peggie
11 months ago
Definitely need to implement logging for security events.
KY
Kyoko
12 months ago
I feel like the installation of software on operational systems could lead to vulnerabilities, so it might not be the right choice for this scenario.
RO
Rosalyn
12 months ago
Clock synchronization seems important for timestamps, but I don't see how it directly helps with security incident investigations.
FA
Farrah
12 months ago
I remember a practice question about security event correlation, and I think it was focused on using specific tools for analysis. Could it be the privileged utility programs?
MI
Mila
1 year ago
I think the answer might be related to logging and monitoring, but I'm not entirely sure which control fits best.
CA
Carmen
1 year ago
Okay, let me see here. The organization wants to analyze security incidents, so I'm thinking the answer might be A - using privileged utility programs to gather and process the relevant data. That could provide the necessary tools for the correlation and analysis they need.
VE
Vesta
1 year ago
Hmm, I'm a bit unsure about this one. The options don't seem to directly address the requirement of enabling correlation and analysis of security events. I'll need to think this through carefully and consider which control would best support those investigative capabilities.
BE
Beckie
1 year ago
This question seems straightforward - the organization needs to implement a security control to enable correlation and analysis of security-related events. I think the answer is B, clock synchronization, as that would help ensure all the recorded data has accurate timestamps for proper analysis.
MA
Mari
1 year ago
Okay, let's see here. I think the key is finding a way to do the preprocessing in a scalable and efficient manner, so that we can handle the high-throughput prediction requests.
LI
Linn
1 year ago
B) Clock synchronization makes the most sense to me. Having consistent timestamps is key for analyzing and investigating security incidents.
DO
Dominque
1 year ago
Hah, A) Use of privileged utility programs? That's like asking the fox to guard the henhouse! Definitely not the right answer here.
EL
Elina
1 year ago
I was leaning towards C) Installation of software on operational systems, but I can see how that might not be the best control for security incident investigations. B) seems like the more appropriate choice.
IL
Iluminada
1 year ago
It's crucial for investigations to have accurate timestamps for security incidents.
ST
Stefany
1 year ago
I agree, having synchronized clocks can help in analyzing the timeline of incidents.
FR
Francesco
1 year ago
I think B) Clock synchronization is important for correlating security events.
AN
Angelyn
1 year ago
I think the answer is B) Clock synchronization. Correlating security events across systems requires accurate time stamps, so clock synchronization is crucial.
IL
Ilene
1 year ago
C: Installation of software on operational systems might be important, but clock synchronization is crucial for accurate time stamps.
RO
Ronald
1 year ago
B: Clock synchronization definitely plays a key role in enabling the correlation and analysis of security-related events.
LE
Lennie
1 year ago
A: I agree, accurate time stamps are essential for correlating security events.
HO
Hortencia
1 year ago
I disagree. I believe the organization should install software on operational systems for better analysis of security incidents.
JA
Jade
1 year ago
I agree with Theodora. Clock synchronization is important for correlating security-related events.
TH
Theodora
1 year ago
I think the organization should implement clock synchronization.