CISA · Question #146
Which of the following is the PRIMARY benefit of operational log management?
The correct answer is B. It improves security with real-time monitoring of network data. The primary benefit of operational log management is improving security through real-time monitoring of network data, enabling detection of anomalies and potential threats.
Question
Which of the following is the PRIMARY benefit of operational log management?
Options
- AIt enhances user experience via predictive analysis.
- BIt improves security with real-time monitoring of network data.
- CIt organizes data to identify performance issues.
- DIt supports data aggregation using unified storage.
How the community answered
(31 responses)- A6% (2)
- B87% (27)
- C3% (1)
- D3% (1)
Why each option
The primary benefit of operational log management is improving security through real-time monitoring of network data, enabling detection of anomalies and potential threats.
While logs can be used for predictive analysis, enhancing user experience is not the *primary* benefit; log management's core strength lies in security and operational troubleshooting.
Operational log management centralizes, normalizes, and analyzes log data from various sources, enabling real-time monitoring for suspicious activities, security events, and policy violations. This proactive approach significantly improves an organization's ability to detect and respond to security incidents.
Identifying performance issues is a benefit of log management, but it's an aspect of operational monitoring rather than the *primary* overarching benefit, especially when considering the importance of security.
Supporting data aggregation using unified storage is a *mechanism* or *feature* of log management, not its primary *benefit* in terms of what it helps an organization achieve.
Concept tested: Primary benefit of operational log management
Source: https://learn.microsoft.com/en-us/azure/azure-monitor/logs/data-platform-logs
Topics
Community Discussion
No community discussion yet for this question.