Certified In Cybersecurity CC · Free Practice Question Easy
Question 84
Which of the following is the MOST important indicator to consider when evaluating the effectiveness of a log management system?
- A Security and compliance
- B Number of logs generated
- C Cost
- D Ease of use
Reveal correct answer
Correct answer: A
Explanation
The correct answer: Security and compliance: The primary purpose of a log management system is to provide insights into the security posture of the environment and to ensure compliance with regulatory requirements. A system's ability to secure logs from tampering, provide controlled access, and help the organization stay compliant with industry regulations is crucial. Additionally, a system that aids in identifying anomalies or security incidents through log analysis is invaluable. The incorrect answers: Cost: While the cost is a consideration for any tool or system acquisition, it's not the primary indicator of a log management system's effectiveness. A more expensive system isn't necessarily more effective, and conversely, an affordable system might not meet all the requirements. Ease of use: An easy-to-use log management system can improve efficiency and reduce the time it takes for users to understand and navigate the system. However, ease of use alone doesn't necessarily indicate the system's overall effectiveness in achieving its primary objectives. Number of logs generated: The sheer volume or number of logs generated is not a direct measure of effectiveness. What matters more is how those logs are processed, analyzed, and stored, and whether they provide meaningful insights for security, troubleshooting, and compliance purposes.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
