300-620 · Question #317
A company is implementing a new security policy to track system access, configuration, and changes. The network engineer must enable the log collection to track user login and logout attempts. In…
The correct answer is B. audit C. fault. To meet the security requirements of tracking user login/logout attempts and configuration changes (including fabric node failures), the following log types must be enabled: Audit logs track user authentication events, such as login and logout attempts. They also log…
Question
A company is implementing a new security policy to track system access, configuration, and changes. The network engineer must enable the log collection to track user login and logout attempts. In addition, any configuration changes such as a fabric node failure must be collected in the logs. The syslog policy is configured to send logs to the company SEIM appliance. Which two log types must be enabled to meet the security requirements? (Choose two.)
Options
- Aerror
- Baudit
- Cfault
- Devent
- Ehealth
How the community answered
(19 responses)- A16% (3)
- B79% (15)
- E5% (1)
Explanation
To meet the security requirements of tracking user login/logout attempts and configuration changes (including fabric node failures), the following log types must be enabled: Audit logs track user authentication events, such as login and logout attempts. They also log configuration changes made by users, including modifications to security policies, system settings, and permissions. This log type is essential for compliance and security monitoring. Fault logs capture hardware or software issues, including fabric node failures and critical system These logs provide detailed insights into system health and failures, making them crucial for security monitoring.
Topics
Community Discussion
No community discussion yet for this question.