Study. uk . com
  1. Home
  2. All questions
  3. Question 433

CISSP study material · question 433 of 500

An organisation cannot fund a dedicated logging network. Which two points from NIST SP 800-92 apply? Choose two.

  1. A separate logging network is required for any organisation handling moderate impact data.
  2. Without a separate network, logs must be transferred on write-once media instead.
  3. Where there is none, logging communications on the regular network should be protected by controls such as encryption.
  4. A separate logging network protects log traffic from eavesdropping and keeps logs flowing when the ordinary network is unstable.
Show the answer

Answer: D. A separate logging network protects log traffic from eavesdropping and keeps logs flowing when the ordinary network is unstable.
C. Where there is none, logging communications on the regular network should be protected by controls such as encryption.

A separate logging network guards against eavesdropping and survives a widespread attack; where there is none, controls such as encryption should protect the traffic.

Source: NIST SP 800-92 (NIST) — SP 800-92 > 3.1 Architecture

Challenge yourself on this topic → Study as cards