Question

What are the benefits of keeping a log of all transactions that occur on your network and reviewing them?



It can be time-consuming and overwhelming to review logs.


You can anticipate and prevent attacks before they happen.


You can find and respond to attacks that have happened.


You may inadvertently make information hard to access for authorized users.

Answer 1

Correct benefits:
- You can anticipate and prevent attacks before they happen — long-term log analysis and anomaly detection reveal patterns and indicators that let you harden systems or block suspicious activity proactively.
- You can find and respond to attacks that have happened — logs provide the audit trail needed for detection, incident investigation, root‑cause analysis and remediation.

The other two statements are not benefits:
- “It can be time‑consuming and overwhelming to review logs” is a drawback/operational challenge, not a benefit.
- “You may inadvertently make information hard to access for authorized users” is also a potential side effect of poor log handling, not a benefit.

Tip: use centralized logging, SIEM/UEBA, alerting and good retention/access controls to get the benefits while mitigating the time/complexity and access issues.