A large organization is deploying a new SIEM. They have multiple data sources, including network devices, servers, and cloud services. The security team wants to ensure that logs are not tampered with and that they can detect unauthorized changes. Which approach should they implement?

Rely on the SIEM's built-in access controls to prevent unauthorized changes.

Store logs locally on each device and only forward alerts to the SIEM.

Forward logs to a centralized SIEM over an encrypted channel and use cryptographic hashing to verify log integrity.

Use a cloud-based log storage service without any additional security controls.

What is the primary purpose of encrypting data at rest?

To protect data while it is being transmitted over a network

To ensure data is not altered during storage

To speed up data access for authorized users

To protect data from unauthorized access when it is stored on a device or in a database

CompTIACySA+

Domain 1Objective 1

System and Network Architecture CS0-003 Practice Questions (Page 3)

Part of the Security operations domain, which accounts for 33% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~21–36 in this domain), expect 4–7 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

33%of the exam

Questions 11–15

11foundation · easy
Which step in the log management lifecycle involves converting log entries from different sources into a common, standardized format?
Select an answer first
12expert · hard
A large organization is deploying a new SIEM. They have multiple data sources, including network devices, servers, and cloud services. The security team wants to ensure that logs are not tampered with and that they can detect unauthorized changes. Which approach should they implement?
Select an answer first
13foundation · easy
A security analyst needs to collect logs from multiple sources into a central platform for correlation and analysis. Which process is being performed?
Select an answer first
14foundation · easy
What is the primary purpose of encrypting data at rest?
Select an answer first
15foundation · easy
Which strategy is used to protect sensitive data by obscuring it so that it cannot be read by unauthorized users, even if the underlying storage is compromised?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.

System and Network Architecture CS0-003 Practice Questions (Page 3)

Questions 11–15

Which step in the log management lifecycle involves converting log entries from different sources into a common, standardized format?

A large organization is deploying a new SIEM. They have multiple data sources, including network devices, servers, and cloud services. The security team wants to ensure that logs are not tampered with and that they can detect unauthorized changes. Which approach should they implement?

A security analyst needs to collect logs from multiple sources into a central platform for correlation and analysis. Which process is being performed?

What is the primary purpose of encrypting data at rest?

Which strategy is used to protect sensitive data by obscuring it so that it cannot be read by unauthorized users, even if the underlying storage is compromised?

Keep studying — Security operations