CertNexus Exam CFR-410 Topic 3 Question 19 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 19
Topic #: 3

An incident response team is concerned with verifying the integrity of security information and event

management (SIEM) events after being written to disk. Which of the following represents the BEST option for addressing this concern?

ATime synchronization

BLog hashing

CSource validation

DField name consistency

Show Suggested Answer

Suggested Answer: A, B

by Pamella at Jul 27, 2023, 08:26 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

1 hours ago

Field name consistency? Really? That's like trying to organize a box of spaghetti. Log hashing is the only option that makes sense here.

upvoted 0 times

...

5 days ago

Source validation? Psh, that's like trying to find a needle in a haystack. Log hashing is the way to go, it's the Sherlock Holmes of the SIEM world.

upvoted 0 times

...

11 days ago

Time synchronization? Nah, that's like trying to catch a speeding bullet with a butterfly net. Log hashing is where it's at!

upvoted 0 times

...

18 days ago

I'm not sure, but I think C) Source validation could also be a good option.

upvoted 0 times

...

21 days ago

I agree with Sol, log hashing can help verify the integrity of SIEM events.

upvoted 0 times

...

22 days ago

I think the best option is B) Log hashing.

upvoted 0 times

...