QuestionQ27

VerifiedOfficial exam objectives/topics

A Data Engineer has configured an Openflow deployment that includes an event table. The Engineer must review logs from the previous 24 hours to investigate a potential security incident.

How can this be done with the LEAST operational overhead?

Explanation

Openflow writes logs to the event table configured for its deployment. Filtering an event-table query by TIMESTAMP for the prior 24 hours retrieves the needed logs directly and reduces the volume scanned, improving query performance and minimizing operational effort.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!