SSCP · Question #1274
A chronologically sorted record of all the activities on a system is known as an____________
The correct answer is E. Audit trail. An audit trail is a chronologically sorted record of all activities on a system, providing a historical sequence of events.
Question
A chronologically sorted record of all the activities on a system is known as an____________
Options
- AIDS system
- BPacket sniffer
- CApplication log
- DAudit log
- EAudit trail
How the community answered
(45 responses)- A2% (1)
- B7% (3)
- D2% (1)
- E89% (40)
Why each option
An audit trail is a chronologically sorted record of all activities on a system, providing a historical sequence of events.
An IDS (Intrusion Detection System) is a tool that monitors for malicious activity, not the chronological record itself.
A packet sniffer captures and analyzes network traffic, serving as a monitoring tool rather than the comprehensive chronological record of system activities.
An application log records events specific to a particular application, which is a component but not the overarching 'chronologically sorted record of all activities' that an audit trail represents.
An audit log typically refers to a specific log file or stream, which contributes to an audit trail, but the 'audit trail' itself is the broader, comprehensive, and chronologically organized collection of these records.
An audit trail is a security-relevant, chronological record of system activities, events, and their associated data, providing evidence of the sequence of operations or actions performed. It enables accountability, incident response, and forensic analysis by offering an immutable history of system usage.
Concept tested: Security logging, audit trails
Source: https://learn.microsoft.com/en-us/purview/audit-standard-overview
Topics
Community Discussion
No community discussion yet for this question.