CompTIA
CV0-004 · Question #284
A bank was recently hacked. The bank reviews the logs to see how the attack occurred. The security administrator suspects the logs were manipulated because no traces of the attack can be found in…
The correct answer is D. Versioning and immutability. Versioning and immutability ensure that logs cannot be altered or deleted, preserving their integrity and providing reliable evidence for forensic analysis.
Security
Question
A bank was recently hacked. The bank reviews the logs to see how the attack occurred. The security administrator suspects the logs were manipulated because no traces of the attack can be found in them. Which of the following should have been enabled before the attack occurred?
Options
- AMetric and alerts
- BTracing and aggregation
- CDashboard and reporting
- DVersioning and immutability
How the community answered
(56 responses)- A4% (2)
- B9% (5)
- C16% (9)
- D71% (40)
Explanation
Versioning and immutability ensure that logs cannot be altered or deleted, preserving their integrity and providing reliable evidence for forensic analysis.
Topics
#Log integrity#Immutable storage#Security logging#Data retention
Community Discussion
No community discussion yet for this question.