A Network Administrator Is Unable to Identify the Root Cause

question 254

Multiple Choice

A network administrator is unable to identify the root cause of a network incident because insufficient evidence about the threat actor's actions was logged. The administrator notes that the server receiving and storing the events was not compromised by any attack and is properly communicating with all network devices. Which of the following can the administrator employ to improve network access accountability?

• A) Activate the audit logs on the network server and resources.
• B) Configure SNMP on the network server.
• C) Deploy a central SIEM server into the network.
• D) Collect traffic statistics from the servers using NetFlow data.

---

Definitions:

Power

One person’s control over another person, including what happens to that person.

Relationship-oriented

Characterises individuals or organizational cultures that prioritize and value personal relationships and interactions.

Task-oriented

A focus on completing tasks or achieving goals, often prioritizing work efficiency over interpersonal relationships.

Boosting Morale

Activities or actions taken to improve the spirit, confidence, or enthusiasm of a group or an individual.