- Home
- All questions
- Question 430
CISSP study material · question 430 of 500
Which three tiers make up a log management infrastructure in NIST SP 800-92? Choose three.
Show the answer
Answer: B. Log monitoring, by consoles used to review and report.
C. Log generation, by the hosts producing the data.
D. Log analysis and storage, by servers receiving the data.
SP 800-92 describes three tiers: log generation, log analysis and storage, and log monitoring. Disposal is one of the functions performed, not a separate tier.
Source: NIST SP 800-92 (NIST) — SP 800-92 > 3.1 Architecture