Which statement best explains why centralized logging is valuable in security operations?

It guarantees that no unauthorized action can occur.

This is wrong because logging improves detection and review but does not guarantee prevention.

It replaces the need for NTP and authentication.

This is wrong because centralized logging does not replace those controls.

It automatically assigns IP addresses to monitoring systems.

This is wrong because logging does not perform address assignment.

What does this AZ-104 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: It improves visibility by collecting events from multiple devices in one place for review and investigation. — Centralized logging is valuable because it brings messages from many devices into one place for review, correlation, and investigation. In plain language, instead of checking each router, switch, firewall, or controller separately, the team can analyze events centrally and more easily see patterns or timelines across the environment. That improves visibility and response. This does not replace access control or encryption, but it complements them by improving monitoring and investigation. The correct answer is the one centered on centralized visibility.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.