Which of the following is the MOST effective control to protect the integrity of database activity logs?

The correct answer is B. Data contained in the logs is encrypted. Encrypting log data protects the logs at the data level itself, not just at the access level. If logs are encrypted, any unauthorized modification corrupts the data in a detectable way, directly preserving integrity. Read-only access (A) and MFA (D) are access controls that can b

Submitted by tarun92· Apr 18, 2026Protection of Information Assets

Question

Options

ARead-only access to logs is granted to personnel
BData contained in the logs is encrypted
CLogs are periodically monitored and reviewed
DLog access is restricted via multi-factor authentication (MFA)

How the community answered

(30 responses)

A
3% (1)
B
83% (25)
C
3% (1)
D
10% (3)

Explanation

Encrypting log data protects the logs at the data level itself, not just at the access level. If logs are encrypted, any unauthorized modification corrupts the data in a detectable way, directly preserving integrity. Read-only access (A) and MFA (D) are access controls that can be bypassed by privileged insiders or through vulnerabilities - they protect access paths, not the data itself. Periodic monitoring (C) is a detective control; it identifies tampering after the fact but does not prevent it. Encryption is a preventive control that binds integrity to the data regardless of how it is accessed.

Topics

#Database security#Log integrity#Cryptographic controls#Information security controls

Community Discussion

No community discussion yet for this question.

Full CISA Practice