問題文
The appliance cannot hold weeks of security events on its own storage, and the audit team needs a year of them kept off the box. Where do those events have to go, and what becomes of an entry during a burst while guaranteed logging is switched on?
選択肢
- The events are directed to the remote examination named in the logging configuration, and during a burst with guaranteed logging switched on each entry is buffered locally.
- The events are directed to the local extent named in the logging configuration, and during a burst with guaranteed logging switched on each entry is dropped immediately.
- The events are directed to the local extent named in the logging configuration, and during a burst with guaranteed logging switched on each entry is buffered locally.
- The events are directed to the remote examination named in the logging configuration, and during a burst with guaranteed logging switched on each entry is dropped immediately.