Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. Ensuring time synchronization of log sources. The most important consideration when developing a log collection and correlation strategy is "B. Ensuring time synchronization of log sources." Time synchronization is crucial for accurate correlation and analysis of log events. When logs from various sources are not synchronized, it becomes challenging to accurately piece together the sequence of events during an incident investigation or threat analysis. While the other options (ensuring the inclusion of all computing resources as log sources, ensuring read-write access to all log sources, ensuring the inclusion of external threat intelligence log sources) are important aspects of log collection and correlation, time synchronization is a fundamental requirement to ensure the integrity and accuracy of log data for effective analysis and response.
Agree it is B. Time sync due to the question's focus on correlation.
Agree with B , Correlation cannot be done if time not sync .