Prev Question
Next Question

The company security policy now requires very detailed auditing of all actions. This includes capturing all executed commands together with their arguments and the environment variables. After activating auditing on all Solaris 10 systems, the security auditor complains about having to check the audit trail on each individual host. He asks for a central place to capture all audit trails. Using standard Solaris 10 security features, which is a solution to this problem?

A.
Configure auditd to send email with the events.

B.
Configure auditd to send the output using syslog to a central loghost.

C.
Configure auditd to store the audit trail using NFS on a central server.

D.
Configure auditd to store the audit trail using LDAP in a central directory.

Prev Question
Next Question

Leave a Reply

Your email address will not be published. Required fields are marked *