Study. uk . com
  1. Home
  2. All questions
  3. Question 599

CompTIA Security+ study material · question 599 of 611

Why do logs need their own access control and integrity protection?

  1. Because logs contain personal data by default
  2. Because logs consume significant storage
  3. Because retention schedules require it
  4. Because an attacker who can edit the log can rewrite the story of the incident
Show the answer

Answer: D. Because an attacker who can edit the log can rewrite the story of the incident

Evidence that the subject of the investigation could alter is not evidence.

Source: OWASP Logging Cheat Sheet (OWASP) — OWASP Logging Cheat Sheet › Protect

Challenge yourself on this topic → Study as cards