When establishing a violation tracking and analysis process, which one of the following parameters is
used to keep the quantity of data to manageable levels?
A.
Quantity baseline
B.
Maximum log size
C.
Circular logging
D.
Clipping levels
Explanation:
To make violation tracking effective, clipping levels must be established. A clipping level is a baseline
of user activity that is considered a routine level of user errors. When a clipping level is exceeded, a
violation record is then produced. Clipping levels are also used for variance detection. -Ronald Krutz
The CISSP PREP Guide (gold edition) pg 318