An administrator is reviewing another administrator s Security policy log settings. Which log setting configuration is consistent with best practices tor normal traffic?

The correct answer is B. Log at Session Start disabled. When creating or editing a security rule, an option to log the transaction is available with two options, Log at Session Start or Log at Session End. For regular logging, the best practice is to log at session end. The reason for that is that applications are likely to change thr

Monitoring and Reporting

Question

Options

ALog at Session Start and Log at Session End both enabled
BLog at Session Start disabled
CLog at Session Start enabled
DLog at Session Start and Log at Session End both disabled

How the community answered

(58 responses)

A
3% (2)
B
76% (44)
C
9% (5)
D
12% (7)

Explanation

When creating or editing a security rule, an option to log the transaction is available with two options, Log at Session Start or Log at Session End. For regular logging, the best practice is to log at session end. The reason for that is that applications are likely to change throughout the lifespan of the session.

Topics

#session logging#Log at Session Start#log best practices#security policy logging

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice