Certification Questions & FAQ
How should a team validate Centralized security logging in practice?SecurityTalent knowledge answer. Members may add responsible, source-based context; do not post secrets, personal data, exam dumps or recalled live exam questions.
Accepted Answer
Define the expected outcome—collects time-aligned security events in a protected searchable repository—and test it with realistic scenarios. Record the owner, scope, evidence, exceptions and review date. Combine technical testing with operational confirmation so a configured control is not mistaken for an effective control.NIST Cybersecurity Framework 2.0: https://www.nist.gov/cyberframework
Accepted Answer
Define the expected outcome—collects time-aligned security events in a protected searchable repository—and test it with realistic scenarios. Record the owner, scope, evidence, exceptions and review date. Combine technical testing with operational confirmation so a configured control is not mistaken for an effective control.NIST Cybersecurity Framework 2.0: https://www.nist.gov/cyberframework
There are no replies made for this post yet.