An election office must centralize device logs after an incident and keep timelines trustworthy while cutting noise. Which operational practice best fits?
Select an answer to reveal the explanation.
Short Explanation
After an incident you want a synchronized story, not a scrapbook of random debug spam. Point devices at a syslog collector, keep clocks honest so timestamps line up, and use sharp conditional debugs instead of turning on the fire hose.
Full Explanation
Operational logging hygiene includes remote syslog, consistent timestamps (typically with NTP), appropriate severity, and restrained debugging. Unconditional debug all can overwhelm CPUs and collectors. Buffered-only logs without time sync hinder forensics. Centralized collection with disciplined debug scope improves incident timelines without drowning signal in noise.