Secure Auditing and Logging CASEJAVA Practice Questions (Page 9)

Questions 41–43

1. 41foundation · easy

   Which measure is most effective for ensuring the integrity of audit log files?

   • ARotating logs daily to ensure they are overwritten frequently.
   • BCompressing log files to reduce their size.
   • CUsing cryptographic hashes or digital signatures to detect unauthorized modifications.
   • DStoring logs in a world-readable directory so they are transparent to all users.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A Java application handles user authentication and authorization. The security team wants to ensure that audit logs capture sufficient information to detect and investigate unauthorized access. Which set of events should be logged?

   • AOnly successful login events.
   • BOnly failed login events.
   • CAll application exceptions, including minor ones.
   • DSuccessful and failed login events, as well as authorization failures and privilege changes.
   Reveal Solution Discussion Select an answer first
3. 43application · medium

   A Java application is being audited for compliance with PCI DSS. The auditor requires that all access to cardholder data be logged. The application currently logs only successful transactions. Which additional events should be logged to meet the requirement?

   • ALog the cardholder data itself to provide proof of access.
   • BLog only the IP address of the user for each transaction.
   • CLog only successful transactions to reduce log volume.
   • DLog all access attempts, including failed ones, with user ID, timestamp, and the action performed.
   Reveal Solution Discussion Select an answer first