CompTIA Security+ (SY0-601) — Question 182

A network administrator needs to determine the sequence of a server farm’s logs. Which of the following should the administrator consider? (Choose two.)

Answer options

• A. Chain of custody
• B. Tags
• C. Reports
• D. Time stamps
• E. Hash values
• F. Time offset

Correct answer: D, F

Explanation

The correct answers are D and F because time stamps indicate when each log entry was created, helping to establish the chronological order of events. Time offset is also essential as it accounts for any discrepancies in time recording across different servers, ensuring accurate sequencing. The other options do not directly relate to the ordering of log entries.