Câu 147: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

An auditor is reviewing the logs from a web application to determine the source of an incident. The web application architecture includes an Internet-accessible application load balancer, a number of web servers in a private subnet, application servers, and one database server in a tiered configuration. The application load balancer cannot store the logs. The following are sample log snippets: Which of the following should the auditor recommend to ensure future incidents can be traced back to the sources?

1. A. Enable the X-Forwarded-For header at the load balancer. — đáp án hiện tại
2. B. Install a software-based HIDS on the application servers.
3. C. Install a certificate signed by a trusted CA.
4. D. Use stored procedures on the database server.
5. E. Store the value of the $_SERVER['REMOTE_ADDR'] received by the web servers.