When establishing a violation tracking and analysis process, which one of the following
parameters is used to keep the quantity of data to manageable levels?
A.
Quantity baseline
B.
Maximum log size
C.
Circular logging
D.
Clipping levels
Explanation:
To make violation tracking effective, clipping levels must be established. A clipping
level is a baseline of user activity that is considered a routine level of user errors. When a
clipping level is exceeded, a violation record is then produced. Clipping levels are also used for
variance detection. -Ronald Krutz The CISSP PREP Guide (gold edition) pg 318
check
0
0
Clipping level is kind of an alarm which trips when the set threshold is reached. It does nothing to manage the size of log files. A log file size would be managed by setting the max log file size, like you do for temp file size in Windows..
0
0
Clipping allows you to zero in on items of interest, GREATLY reducing your log file sizes. If you put a limit on your log file sizes, they will be full of unneeded data, leaving no space for the rest of the data you actually need.
0
0