1. Home
2. All questions
3. Question 438

CISSP study material · question 438 of 500

What distinguishes log reduction from event reduction in NIST SP 800-92, and when are they typically applied?

• Security operations

1. Log reduction strips fields while event reduction drops entries; both are applied at generation.
2. Log reduction drops unneeded entries while event reduction strips unneeded fields from every entry; both usually accompany archival.
3. Log reduction removes entries after correlation while event reduction removes them before; both apply at analysis.
4. Log reduction compresses files while event reduction deduplicates entries; both are applied at rotation.

Challenge yourself on this topic → Study as cards