A company's security policy requires that logs be immutable and tamper-evident to support forensic investigations. The logs are currently written to a local file on the application server. Which solution best meets the requirement?

Write logs to a write-once-read-many (WORM) storage system that prevents modification or deletion.

Set the log file attribute to ReadOnly using the file system.

Use a log shipping agent to send logs to a SIEM, and rely on the SIEM's access controls.

Encrypt the log file with a strong encryption algorithm and store the key on the same server.

EC-CouncilCertified Application Security Engineer (.NET)

Domain 7Objective 2

Defensive Coding Against Information Disclosure CASENET Practice Questions (Page 9)

Part of the Secure Coding: Error Handling and Logging domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

10concepts

10 Concepts in This Objective

Information Disclosure Risks in Error Handling
Safe Error Message Design
Structured Exception Handling
Centralized Error Logging
Logging Sensitive Data Protection
Log Obfuscation and Redaction
Secure Log Storage and Access Control
Error Handling in .NET Applications
Logging Frameworks and Best Practices
Monitoring and Alerting for Anomalies

Questions 41–41

41expert · hard
A company's security policy requires that logs be immutable and tamper-evident to support forensic investigations. The logs are currently written to a local file on the application server. Which solution best meets the requirement?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CASENET

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.

Defensive Coding Against Information Disclosure CASENET Practice Questions (Page 9)

Questions 41–41

A company's security policy requires that logs be immutable and tamper-evident to support forensic investigations. The logs are currently written to a local file on the application server. Which solution best meets the requirement?

Keep studying — Secure Coding: Error Handling and Logging