Study. uk . com
  1. Home
  2. All questions
  3. Question 444

CISSP study material · question 444 of 500

A legacy appliance cannot forward its logs to any server and is not networked. What does NIST SP 800-92 suggest where those logs must still reach the infrastructure?

  1. Install a forwarding agent on the appliance regardless of vendor support.
  2. Exclude the appliance from the logging programme and note the gap in the risk register.
  3. Transfer them out of band to write-once media and copy them from there to a log server.
  4. Reconfigure the appliance to log to a shared network folder.
Show the answer

Answer: C. Transfer them out of band to write-once media and copy them from there to a log server.

SP 800-92 offers out-of-band solutions such as manually transferring logs to write-once media and copying the data from that media to a log server for hosts that cannot participate automatically.

Source: NIST SP 800-92 (NIST) — SP 800-92 > 3.1 Architecture

Challenge yourself on this topic → Study as cards