フリー問題: One event has to be tied to a host, then…

フリー問題

Conducting Forensic Analysis and Incident Response Using Cisco Technologies for Cybersecurity のフリー問題 20 / 20 問目

問題文

One event has to be tied to a host, then to an account, then to what that account did. Which chain of the records does the guidance set out for that?

The record of the watcher on the network ties the event to a host, then the audit record on that host ties it to an account and the watcher there names the deeds.
The record of the watcher on the network ties the event to a host, then the audit record on that host ties it to an account and the watcher there ignores the deeds.
The record of the watcher on the network ties the event to a place, then the audit record on that host ties it to an account and the watcher there names the deeds.
The record of the watcher on the network ties the event to a place, then the audit record on that host ties it to an account and the watcher there ignores the deeds.

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。