Study. uk . com
  1. Home
  2. All questions
  3. Question 434

CISSP study material · question 434 of 500

Which two things does NIST SP 800-92 say log rotation achieves, and what commonly happens to the closed file? Choose two.

  1. It normalises timestamps across the rotated files.
  2. It preserves log entries and keeps file sizes manageable.
  3. It removes entries that event filtering has already suppressed.
  4. The preserved file is often compressed, and scripts may act on it to analyse or filter its contents.
Show the answer

Answer: B. It preserves log entries and keeps file sizes manageable.
D. The preserved file is often compressed, and scripts may act on it to analyse or filter its contents.

Rotation closes one file and opens another on a schedule or size threshold, preserving entries and keeping sizes manageable; the closed file is often compressed.

Source: NIST SP 800-92 (NIST) — SP 800-92 > 3.2 Functions

Challenge yourself on this topic → Study as cards