An IS auditor is evaluating the log management system for an organization with devices and systems in multiple geographic locations. Which of the following is MOST important for the auditor to verify?
It is C, it doesn't matter if they are encrypted and digitally signed if it isn't synchronized. You don't even know what is where or what is missing if the logs are not synchronized. The question even states in different geographical areas. It is literally pushing you to ensure synchronization between them.
For devices and systems in multiple geographic locations, having synchronized log files is critical for overall monitoring and analysis integrity, ensuring log data is consistent and enables effective problem resolution and analysis of security incidents.
This ensures the integrity, authenticity, and confidentiality of the log data, which is crucial for protecting against tampering and ensuring trustworthiness across multiple geographic locations. While synchronization is important for consistency, security takes precedence in log management.
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
blehbleh
4 weeks agoRS66
3 months agoSwallows
4 months agoSwallows
4 months ago