nerdexam
EC-Council

312-50V13 · Question #573

A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before…

The correct answer is B. Determine the impact of enabling the audit feature. Before enabling a new system feature like auditing, especially on systems handling sensitive data, the first crucial step is to determine its potential impact on system performance, resource utilization, and existing operations.

Submitted by zhang_li· Mar 6, 2026Introduction to Ethical Hacking

Question

A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?

Options

  • APerform a vulnerability scan of the system.
  • BDetermine the impact of enabling the audit feature.
  • CPerform a cost/benefit analysis of the audit feature.
  • DAllocate funds for staffing of audit log review.

How the community answered

(50 responses)
  • A
    4% (2)
  • B
    94% (47)
  • D
    2% (1)

Why each option

Before enabling a new system feature like auditing, especially on systems handling sensitive data, the first crucial step is to determine its potential impact on system performance, resource utilization, and existing operations.

APerform a vulnerability scan of the system.

Performing a vulnerability scan is important for overall security but is not the immediate first step directly preceding the decision to enable a new system feature like auditing.

BDetermine the impact of enabling the audit feature.Correct

Enabling auditing can significantly impact system performance due to increased CPU usage, disk I/O, and storage requirements for logs; therefore, determining this potential impact is the essential first step to prevent service disruptions or resource exhaustion.

CPerform a cost/benefit analysis of the audit feature.

A cost/benefit analysis is a strategic decision that relies on understanding the impacts (costs) first; you need to determine the impact before you can accurately analyze costs and benefits.

DAllocate funds for staffing of audit log review.

Allocating funds for staffing to review audit logs is a subsequent operational decision, after the impact and overall strategy for auditing have been determined.

Concept tested: System audit implementation considerations

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-auditing-planning-and-deployment

Topics

#Auditing#Security controls#Risk assessment#System impact analysis

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V13 Practice