CCSK · Question #76
When configured properly, logs can track every code, infrastructure, and configuration change and connect it back to the submitter and approver, including the test results.
The correct answer is B. True. Comprehensive audit and change management logging, when properly configured, creates a full traceability chain for all changes in a system. This question tests understanding of what well-implemented logging can capture in a DevOps or cloud environment.
Question
When configured properly, logs can track every code, infrastructure, and configuration change and connect it back to the submitter and approver, including the test results.
Options
- AFalse
- BTrue
How the community answered
(41 responses)- A22% (9)
- B78% (32)
Why each option
Comprehensive audit and change management logging, when properly configured, creates a full traceability chain for all changes in a system. This question tests understanding of what well-implemented logging can capture in a DevOps or cloud environment.
False is incorrect because modern audit logging systems are fully capable of recording comprehensive change metadata - including who made the change, who approved it, and what test results accompanied it - when properly implemented and integrated.
When properly configured, logging systems integrated with version control, CI/CD pipelines, and infrastructure-as-code tools can capture every change to code, infrastructure, and configuration along with the identity of the submitter and approver. Change management audit logs can also store associated test results, providing end-to-end accountability. This capability is a key control for compliance, forensic investigation, and change traceability.
Concept tested: Audit log capabilities for change traceability
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-92r1.pdf
Topics
Community Discussion
No community discussion yet for this question.