You are talking to a colleague who Is deciding what information they should include in their organization's logs to help with security auditing. Which of the following items should you tell them to…

The correct answer is D. userid. Logging User IDs (D) can pose privacy concerns and may conflict with regulations such as the General Data Protection Regulation (GDPR), which emphasizes the protection of personal data and privacy. Therefore, while logging details such as Timestamps, Session IDs, and Source IP…

Incident Handling and Response Management

Question

You are talking to a colleague who Is deciding what information they should include in their organization's logs to help with security auditing. Which of the following items should you tell them to NOT log?

Options

ATimestamp
BSession ID
CSource IP eddross
Duserid

How the community answered

(25 responses)

A
4% (1)
B
12% (3)
C
4% (1)
D
80% (20)

Explanation

Logging User IDs (D) can pose privacy concerns and may conflict with regulations such as the General Data Protection Regulation (GDPR), which emphasizes the protection of personal data and privacy. Therefore, while logging details such as Timestamps, Session IDs, and Source IP addresses are essential for security auditing to track when events occur, who is initiating sessions, and from where, care must be taken with User IDs. The handling of personally identifiable information (PII) must comply with privacy laws and organizational policies to safeguard individual privacy rights.

Topics

#security logging#audit logs#log management#privacy in logging

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice