Secure Auditing and Logging CASEJAVA Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company's security policy requires that audit logs be protected from unauthorized modification and that any tampering be detectable. Which implementation best meets this requirement?

   • AEncrypt logs with a key stored on the same server.
   • BUse a centralized logging server with a cryptographic hash chain (e.g., each log entry includes the hash of the previous entry).
   • CCompress logs daily and store them on the application server.
   • DStore logs on a network share with write permissions granted to all developers.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A Java application logs user input to a centralized log management system. The security team discovers that an attacker has been injecting forged log entries that appear to come from a legitimate user. The team wants to prevent this while maintaining the ability to log user input for debugging. Which approach is most effective?

   • ALog user input in a separate file that is not accessible to the application.
   • BDisable logging of user input entirely.
   • CUse a logging library that automatically truncates long strings.
   • DSanitize user input by removing control characters and also include a server-side generated request ID in each log entry.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company's audit logs are stored on a shared network drive. The security team wants to ensure that only authorized personnel can read the logs and that any modification is detected. Which control is most effective?

   • ACompress the log files and store them in a password-protected ZIP archive.
   • BEncrypt the log files with a password shared among the security team.
   • CSet NTFS permissions to allow only the security team to read and write the log files.
   • DUse a centralized log management system with role-based access control and cryptographic hash verification.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is the primary risk of logging a user's plaintext password in an application log file?

   • AIt will corrupt the log file because passwords contain special characters.
   • BIt will cause the application to run slower because hashing is required before logging.
   • CThe password could be exposed to anyone with read access to the log file, leading to credential theft.
   • DIt will cause the application to crash due to memory overflow.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the main purpose of setting up real-time alerting on audit logs?

   • ATo reduce the storage space required for logs by filtering out less important events.
   • BTo enable rapid detection and response to security incidents as they occur.
   • CTo replace the need for manual log review by security analysts.
   • DTo automatically fix vulnerabilities in the application.
   Reveal Solution Discussion Select an answer first