A company is sending proxy logs to their SIEM via syslog over TCP. The SIEM is receiving logs but they are arriving out of order, causing correlation issues. The proxy is configured to send logs to a load-balanced syslog server. What is the most likely cause of the out-of-order logs?

The proxy is sending logs to multiple syslog servers, and the SIEM is merging them.

The proxy is generating logs with incorrect timestamps.

The load balancer is distributing logs to multiple syslog servers, and the SIEM is not sorting them by timestamp.

The syslog server is using UDP, which does not guarantee order.

GIAC Continuous Monitoring Certification

Domain 2Objective 4

Proxies & SIEM GMON Practice Questions (Page 9)

Part of the Network Monitoring and Protection domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~17–29 in this domain), expect 4–7 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

9concepts

Questions 41–41

41expert · hard
A company is sending proxy logs to their SIEM via syslog over TCP. The SIEM is receiving logs but they are arriving out of order, causing correlation issues. The proxy is configured to send logs to a load-balanced syslog server. What is the most likely cause of the out-of-order logs?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.

Proxies & SIEM GMON Practice Questions (Page 9)

Questions 41–41

A company is sending proxy logs to their SIEM via syslog over TCP. The SIEM is receiving logs but they are arriving out of order, causing correlation issues. The proxy is configured to send logs to a load-balanced syslog server. What is the most likely cause of the out-of-order logs?

Keep studying — Network Monitoring and Protection