CFA-001 practice question 9 of 25
Log management includes all the processes and techniques used to collect, aggregate, and analyze computer-generated log messages. It consists of the hardware, software, network and media used to generate, transmit, store, analyze, and dispose of log data.
Full set: 180 questionsDomain Network Forensics
The statement provides a comprehensive and accurate definition of log management. It correctly identifies the core processes—collection, aggregation, and analysis—and encompasses the entire log data lifecycle, from generation and transmission to storage, analysis, and final disposal. Furthermore, it correctly includes the technological infrastructure (hardware, software, network, media) that underpins these activities. This definition aligns with established frameworks and best practices in computer security and forensics, which view log management as a holistic system involving both processes and technology to ensure data integrity, availability, and confidentiality for security monitoring and incident response.
B. False: This option is incorrect because the provided statement is a standard, textbook definition of log management, consistent with authoritative sources in the field of computer security.
1. Kent, K., & Souppaya, M. (2006). Guide to Computer Security Log Management (NIST Special Publication 800-92). National Institute of Standards and Technology. In Section 2.1, "What Is Log Management?", the guide states, "Log management is the process for generating, transmitting, storing, analyzing, and disposing of log data." It also details the necessary infrastructure.
2. University of California, Berkeley. (2020). CS 161: Computer Security, Lecture 18: Logging and Auditing. Course materials. The lecture defines the log lifecycle, including generation, collection, storage, and analysis, which directly supports the components mentioned in the question's statement.
3. Dykstra, J., & D'Arcy, J. (2012). A Survey of Log Management and the Law. In Security and Privacy in Communication Networks (pp. 458-475). Springer. The introduction defines log management as "the practice of collecting, aggregating, storing, analyzing, and disposing of log data," reinforcing the accuracy of the question's statement. (DOI: 10.1007/978-3-642-35964-427)
Keep practicing
Take the free CFA-001 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CFA-001 practice questions
- Question 1Which of the following commands shows you the names of all open shared files on a server …
- Question 2Billy, a computer forensics expert, has recovered a large number of DBX files during fore…
- Question 3Hash injection attack allows attackers to inject a compromised hash into a local session …
- Question 4The Apache server saves diagnostic information and error messages that it encounters whil…
- Question 5First response to an incident may involve three different groups of people, and each will…
- Question 6The Recycle Bin exists as a metaphor for throwing files away, but it also allows user to …
