Secure Auditing and Logging CASENET Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   You are reviewing the error handling code in an ASP.NET Core application. The current code catches exceptions and logs the exception object directly. A security audit flags that sensitive data from the request (e.g., passwords) may appear in the logs. Which code change is the most effective first step?

   • AUse a custom exception class that sanitizes its message and properties before logging.
   • BLog the exception only in the development environment and suppress all logging in production.
   • CImplement a logging filter that redacts known sensitive patterns (e.g., password, token) from the log output.
   • DLog only the exception message and stack trace, and remove any custom properties that contain request data.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When integrating error handling with logging, what should be logged for an exception?

   • AThe exception type, message, stack trace, and relevant non-sensitive context, while ensuring sensitive data is not included.
   • BA generic error message without any details to avoid information disclosure.
   • CThe full exception details including stack trace and any sensitive data in the message.
   • DOnly the exception message, because stack traces are too verbose.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An e-commerce company is required by PCI DSS to maintain an audit trail of all access to cardholder data. The application is a .NET web service. Which set of events should be logged to satisfy this requirement?

   • AAll HTTP requests to the web service, including static content.
   • BEvery successful and failed login attempt, all access to cardholder data, and all privilege changes.
   • COnly failed login attempts and application errors.
   • DOnly successful logins and password changes.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why is secure auditing and logging essential for an application's security posture?

   • AIt automatically prevents all security breaches from occurring.
   • BIt eliminates the need for other security controls like authentication and authorization.
   • CIt ensures that application code is free from vulnerabilities.
   • DIt provides a historical record that can be used to detect, investigate, and respond to security incidents.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A healthcare application is required to log all access to patient records. The compliance team wants to ensure that the logs do not contain protected health information (PHI). Which logging practice best meets this requirement?

   • ALog the full patient record in the audit log to provide complete context for investigators.
   • BLog only the user ID and the timestamp, without the patient ID.
   • CLog the patient's name and date of birth, but not the user ID.
   • DLog the patient ID, the user ID, the timestamp, and the action performed, but not the patient's name or medical data.
   Reveal Solution Discussion Select an answer first