nerdexam
(ISC)2

CGRC · Question #240

A chronological record of system activities, including records of system accesses and operations performed in a given period best defines: Response:

The correct answer is D. Audit log. The definition describes a sequential and time-stamped record of events within a system, detailing who accessed what and what actions were taken. This systematic recording of activities for security and operational purposes is precisely what an audit log provides.

Assessment/Audit of Security and Privacy Controls

Question

A chronological record of system activities, including records of system accesses and operations performed in a given period best defines:

Response:

Options

  • AAdequate security
  • BResilience
  • CAssurance
  • DAudit log

How the community answered

(53 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    2% (1)
  • D
    92% (49)

Why each option

The definition describes a sequential and time-stamped record of events within a system, detailing who accessed what and what actions were taken. This systematic recording of activities for security and operational purposes is precisely what an audit log provides.

AAdequate security

'Adequate security' is a general state of protection, not a specific record of activities.

BResilience

'Resilience' refers to a system's ability to recover from failures and maintain operations, not a record of activities.

CAssurance

'Assurance' refers to the confidence that a system meets its security objectives, not a chronological record of events.

DAudit logCorrect

An audit log is a chronological record of system activities, documenting events such as user logins, file accesses, system configuration changes, and other operations. It is crucial for security monitoring, forensics, and compliance, enabling administrators to track actions performed within a system.

Concept tested: Definition of audit log

Source: https://csrc.nist.gov/glossary/term/audit-log

Topics

#Audit logs#Security logging#System activities#Monitoring

Community Discussion

No community discussion yet for this question.

Full CGRC Practice