What is one practice that can help you to maintain a digital chain of custody in your network?

Question

Options

• AEnable packet capturing on Instant AP or Mobility Controller (MC) datapath on an ongoing basis.
• BEnsure that all network infrastructure devices use RADIUS rather than TACACS+ to authenticate
• CEnsure that all network infrastructure devices receive a valid clock using authenticated NTP.
• DEnable packet capturing on Instant AP or Mobility Controller (MC) controlpath on an ongoing basis.

• A
  11% (7)
• B
  8% (5)
• C
  77% (47)
• D
  3% (2)

Explanation

A digital chain of custody ensures that evidence (e.g., logs, timestamps) collected from a network can be reliably used in legal or forensic investigations. It requires maintaining the integrity and authenticity of data, including accurate timestamps for events. HPE Aruba Networking devices, such as Instant APs, Mobility Controllers (MCs), and AOS-CX switches, support features to help maintain a digital chain of custody. Option C, "Ensure that all network infrastructure devices receive a valid clock using authenticated NTP," is correct. Accurate and synchronized time across all network devices is critical for maintaining a digital chain of custody. Timestamps in logs (e.g., authentication events, traffic logs) must be consistent and verifiable. Network Time Protocol (NTP) is used to synchronize device clocks, and authenticated NTP ensures that the time source is trusted and not tampered with (e.g., using MD5 or SHA authentication). This practice ensures that logs from different devices can be correlated accurately during an investigation.

No community discussion yet for this question.