Study. uk . com
  1. Home
  2. All questions
  3. Question 432

CISSP study material · question 432 of 500

An architect places a first level of log servers close to the generators that simply receive and forward. Which two benefits does NIST SP 800-92 attribute to this arrangement? Choose two.

  1. It lets generators hand off logs locally when connectivity to the central servers is unreliable.
  2. It guarantees that no log entry is ever filtered before storage.
  3. It protects the central log servers from direct attack.
  4. It removes the need to normalise timestamps at the central servers.
Show the answer

Answer: C. It protects the central log servers from direct attack.
A. It lets generators hand off logs locally when connectivity to the central servers is unreliable.

Log caching servers receive logs from generators and forward them onward, which protects the second level from direct attack and helps where network reliability between the two is a concern.

Source: NIST SP 800-92 (NIST) — SP 800-92 > 3.1 Architecture

Challenge yourself on this topic → Study as cards