nerdexam
CSA

CCSK · Question #76

When configured properly, logs can track every code, infrastructure, and configuration change and connect it back to the submitter and approver, including the test results.

The correct answer is B. True. Comprehensive audit and change management logging, when properly configured, creates a full traceability chain for all changes in a system. This question tests understanding of what well-implemented logging can capture in a DevOps or cloud environment.

Cloud Security Operations

Question

When configured properly, logs can track every code, infrastructure, and configuration change and connect it back to the submitter and approver, including the test results.

Options

  • AFalse
  • BTrue

How the community answered

(41 responses)
  • A
    22% (9)
  • B
    78% (32)

Why each option

Comprehensive audit and change management logging, when properly configured, creates a full traceability chain for all changes in a system. This question tests understanding of what well-implemented logging can capture in a DevOps or cloud environment.

AFalse

False is incorrect because modern audit logging systems are fully capable of recording comprehensive change metadata - including who made the change, who approved it, and what test results accompanied it - when properly implemented and integrated.

BTrueCorrect

When properly configured, logging systems integrated with version control, CI/CD pipelines, and infrastructure-as-code tools can capture every change to code, infrastructure, and configuration along with the identity of the submitter and approver. Change management audit logs can also store associated test results, providing end-to-end accountability. This capability is a key control for compliance, forensic investigation, and change traceability.

Concept tested: Audit log capabilities for change traceability

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-92r1.pdf

Topics

#logging#audit trail#change tracking#configuration management

Community Discussion

No community discussion yet for this question.

Full CCSK Practice