GIAC
GCFE · Question #5
What can be inferred from the high frequency of certain event IDs in the security logs? (Choose Two)
The correct answer is B. Frequent user logins and logouts or failed security events C. Regular changes in user account privileges. See the full explanation below for the reasoning.
Question
What can be inferred from the high frequency of certain event IDs in the security logs? (Choose Two)
Options
- ARepeated system updates
- BFrequent user logins and logouts or failed security events
- CRegular changes in user account privileges
- DConsistent application usage patterns
How the community answered
(39 responses)- A18% (7)
- B72% (28)
- D10% (4)
Community Discussion
No community discussion yet for this question.