CS0-003 Question 129

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B6

  By configuring the servers to forward logs to a SIEM, security analysts can centrally collect and analyze log data from multiple servers without the need to log in to each server individually. This provides a centralized view of the events occurring throughout the corporate environment, allowing analysts to more easily detect and respond to security incidents. Deploying a database to aggregate logging could be part of a logging solution but does not provide the same level of centralized visibility as a SIEM. Sharing log directories or automating the emailing of logs would require manual effort and would not provide the same level of centralized visibility and analysis capabilities as a SIEM.

• Chose B13

  Correct Configuring the servers to forward logs to a SIEM is the most effective way to achieve central visibility into events occurring throughout the corporate environment without having to log in to each server individually