Study. uk . com
  1. Home
  2. All questions
  3. Question 446

CISSP study material · question 446 of 500

A tool reads database-held log records and writes them out as structured text files, filtering and normalising along the way. Which function does NIST SP 800-92 name for this?

  1. Log preservation, which copies entries to an alternate format for retention.
  2. Event correlation, which relates entries across formats.
  3. Log conversion, which parses a log in one format and stores its entries in another and often includes filtering, aggregation and normalisation.
  4. Log reduction, which discards entries that the destination format cannot hold.
Show the answer

Answer: C. Log conversion, which parses a log in one format and stores its entries in another and often includes filtering, aggregation and normalisation.

Log conversion parses a log in one format and stores its entries in a second format, and SP 800-92 notes it sometimes includes actions such as filtering, aggregation and normalisation.

Source: NIST SP 800-92 (NIST) — SP 800-92 > 3.2 Functions

Challenge yourself on this topic → Study as cards