Network-based logging has which advantage over host-based logging when reviewing malicious activity about a victim machine?

The correct answer is C. Properly handled network-based logs may be more reliable and valid.. Network-based logging offers an advantage because it provides a centralized and tamper- resistant way to track activity, especially when reviewing malicious activity on a victim machine.

Submitted by marco_it· Mar 5, 2026Security Operations

Question

Network-based logging has which advantage over host-based logging when reviewing malicious activity about a victim machine?

Options

AAddresses and protocols of network-based logs are analyzed.
BHost-based system logging has files stored in multiple locations.
CProperly handled network-based logs may be more reliable and valid.
DNetwork-based systems cannot capture users logging into the console.

How the community answered

(56 responses)

A
4% (2)
B
11% (6)
C
80% (45)
D
5% (3)

Explanation

Network-based logging offers an advantage because it provides a centralized and tamper- resistant way to track activity, especially when reviewing malicious activity on a victim machine.

Topics

#logging#network security monitoring#incident response#evidence integrity

Community Discussion

No community discussion yet for this question.

Full CISSP Practice