Which of the following would be of GREATEST concern to an IS auditor when assessing the effectiveness of log management?

The correct answer is A. Logs are stored on the same server as the application. Storing logs on the same server as the application is the greatest concern because it defeats the primary security purpose of logs - if an attacker compromises the application server, they can tamper with or delete the logs, destroying the audit trail entirely. B (inconsistent…

Submitted by viktor_hu· Apr 18, 2026Protection of Information Assets

Question

Options

ALogs are stored on the same server as the application.
BLogs are inconsistent.
CThe log reading utility tool is outdated.
DLogs are not in a human-readable format.

How the community answered

(45 responses)

A
69% (31)
B
18% (8)
C
4% (2)
D
9% (4)

Explanation

Storing logs on the same server as the application is the greatest concern because it defeats the primary security purpose of logs - if an attacker compromises the application server, they can tamper with or delete the logs, destroying the audit trail entirely. B (inconsistent logs) is a problem but doesn't eliminate log integrity wholesale - inconsistency can still be investigated. C (outdated log reader) is a minor operational inconvenience, not a security risk. D (non-human-readable format) is manageable since parsing tools can convert formats; the data is still intact and trustworthy.

Memory tip: Think of logs as your security "witness" - a witness kept in the same room as the suspect can be silenced. Logs must be separated from what they monitor to remain credible.

Topics

#Log Management#Information Security#Data Integrity#Audit Concerns

Community Discussion

No community discussion yet for this question.

Full CISA Practice