nerdexam
EC-Council

312-49 · Question #485

Event correlation is a procedure that is assigned with a new meaning for a set of events that occur in a predefined interval of time. Which type of correlation will you use if your organization…

The correct answer is B. Cross-platform correlation. Cross-platform correlation is designed to work across heterogeneous environments - multiple operating systems (Windows, Linux, macOS) and diverse network hardware vendors. It normalizes and correlates events from disparate sources into a unified view. Same-platform correlation…

Submitted by jordan8· Apr 18, 2026Network Forensics

Question

Event correlation is a procedure that is assigned with a new meaning for a set of events that occur in a predefined interval of time. Which type of correlation will you use if your organization wants to use different OS and network hardware platforms throughout the network?

Options

  • ASame-platform correlation
  • BCross-platform correlation
  • CMultiple-platform correlation
  • DNetwork-platform correlation

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    96% (43)
  • D
    2% (1)

Explanation

Cross-platform correlation is designed to work across heterogeneous environments - multiple operating systems (Windows, Linux, macOS) and diverse network hardware vendors. It normalizes and correlates events from disparate sources into a unified view. Same-platform correlation only works within a single vendor or OS ecosystem. 'Multiple-platform correlation' and 'Network-platform correlation' are not standard industry terms and serve as distractors.

Topics

#Event correlation#Cross-platform correlation#Security monitoring

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice