CSSLP · Question #369
Which scenario best illustrates auditing as a method of accountability within a technology company?
The correct answer is D. An employee uses a proximity badge to enter a locked workstation where files are erased and an. Auditing is the process of systematically reviewing records of activities to ensure compliance with policies, identify security breaches, and hold individuals accountable for their actions. The scenario depicting an employee's actions leading to file erasure, with associated logs
Question
Which scenario best illustrates auditing as a method of accountability within a technology company?
Options
- AA monitoring system detects a service failure and writes diagnostic events to a system log
- BA login attempt is refused and a record of the failed authentication attempt is stored
- CA background data repair job automatically corrects discovered record inconsistencies
- DAn employee uses a proximity badge to enter a locked workstation where files are erased and an
How the community answered
(36 responses)- A3% (1)
- B6% (2)
- C3% (1)
- D89% (32)
Why each option
Auditing is the process of systematically reviewing records of activities to ensure compliance with policies, identify security breaches, and hold individuals accountable for their actions. The scenario depicting an employee's actions leading to file erasure, with associated logs, directly exemplifies auditing for accountability.
A monitoring system detecting a service failure and writing diagnostic events is a logging and monitoring activity for operational health, not primarily for individual accountability.
Storing a record of a refused login attempt is a logging activity for security and troubleshooting, but it doesn't directly illustrate auditing as a method of accountability for a specific user's actions beyond the attempt itself.
A background data repair job automatically correcting inconsistencies is a system maintenance function for data integrity, not an auditing mechanism for human accountability.
This scenario best illustrates auditing for accountability because it describes an employee's identifiable action (using a badge, erasing files) which, when combined with logs, allows an organization to trace back specific actions to an individual and hold them responsible for their behavior. The availability of logs for review enables accountability.
Concept tested: Security auditing and accountability
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/security-auditing-overview
Topics
Community Discussion
No community discussion yet for this question.