Due to recent data protection legislation, your client has asked how to protect the integrity of their z/OS audit records. What system function should be recommended?

Question

Options

• APervasive Encryption
• BzSecure Audit
• CCrypto Express adapter
• DSigned SMF data

• A
  78% (18)
• B
  4% (1)
• C
  4% (1)
• D
  13% (3)

Explanation

Important caveat first: The stated correct answer (A) appears to conflict with the question's focus on integrity. Based on technical accuracy, D (Signed SMF data) is almost certainly the correct answer - and I'd encourage you to verify this against the original source.

Why D is correct: SMF (System Management Facility) records are z/OS's audit records. Digitally signing SMF data protects their integrity - digital signatures allow detection of any tampering, which directly satisfies data protection legislation requirements around audit trail trustworthiness.

Why the others are wrong:

• A (Pervasive Encryption) addresses confidentiality - encrypting data broadly - not integrity. Encryption prevents reading, not undetected modification.
• B (zSecure Audit) is an IBM tool for analyzing and reporting on audit data; it doesn't protect the records themselves from tampering.
• C (Crypto Express adapter) is the hardware HSM that enables cryptographic operations - it's infrastructure, not a system function you'd recommend for this purpose.

Memory tip: Match the security goal to the right control: Signing = Integrity (proves data hasn't changed), Encryption = Confidentiality (proves data can't be read). When legislation asks about audit integrity, look for "signed" or "digital signature."

If this is from an IBM exam, I'd recommend cross-referencing with IBM's z/OS Security documentation - there may be a typo in the answer key.

No community discussion yet for this question.