Login to manage your account

Your email Please enter a valid email address.

Password Forgot Password?

Please enter a valid password.

OR

Don't have an account yet? Sign up

Why should logs be shipped off the originating host?

A So evidence survives if that host is compromised or fails
B To save disk space only
C To improve application performance
D Because local logs cannot be searched

Answer

So evidence survives if that host is compromised or fails

Attackers routinely clear local logs. Centralised, immutable logging is what makes an investigation possible after a compromise.

All IT operations MCQs

Login to manage your account

Your email id Please enter a valid email address.

Password Forgot Password?

Please enter a valid password.

OR

Don't have an account yet? Sign up as

Jobseeker

Employer