In network and web attack forensics, what is the primary purpose of event correlation?

To generate a single report that summarizes all network traffic for compliance purposes

To encrypt log files so that they cannot be altered during an investigation

To combine and analyze events from multiple sources to identify relationships that indicate an attack

To replace the need for manual log review by automatically deleting irrelevant events

EC-CouncilDigital Forensics Essentials

Domain 5Objective 2

Event Correlation Concepts and Techniques DFE Practice Questions (Page 9)

Part of the Network and Web Attack Forensics domain, which makes up ~15% of our current practice bank.

41questions here

9free pages

5concepts

Questions 41–41

41foundation · easy
In network and web attack forensics, what is the primary purpose of event correlation?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DFE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.

Event Correlation Concepts and Techniques DFE Practice Questions (Page 9)

Questions 41–41

In network and web attack forensics, what is the primary purpose of event correlation?

Keep studying — Network and Web Attack Forensics