156-110: Check Point Certified Security Principles Associate (CCSPA)Demo

Question

Which of the following is NOT an auditing function that ought to be performed regularly?

A Reviewing IDS alerts
B Reviewing performance logs
C Reviewing IDS logs
D Reviewing audit logs
E Reviewing system logs

Explanation

Regular auditing involves reviewing and analyzing system audit records for unusual or inappropriate activity. IDS alerts and IDS logs support security-event detection, while system and audit logs provide records for that review. Performance logs are primarily used for operational monitoring and capacity or performance management, rather than as a regular auditing function.

Learn more

NIST SP 800-171 Rev. 3 — Audit Record Review, Analysis, and Reporting

156-110: Check Point Certified Security Principles Associate (CCSPA)Demo

AstroTutor

Notes

Readiness

QuestionQ7

Community Discussion