Question: Question 1 Timestamps are important because can not be changed or deleted by attackers when configured properly, allows you to correlate events across the network
Question 1
Timestamps are important because
| can not be changed or deleted by attackers | ||
| when configured properly, allows you to correlate events across the network | ||
| can always be used to attribute actions to a user | ||
|
| are always synced by NTP servers to ensure accuracy |
Question 2
Signature Detection requires a baseline of the network to ensure accuracy.
True
False
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
