Discussion
Assertion (A): Audit logs should be written to a destination the audited account cannot modify.
Reason (R): An attacker with control of the account would otherwise delete the record of their activity.
Answer: D
Correct answer: Both A and R are true, and R is the correct explanation of A
Both are true and the reason gives the threat. If the audited account can write to its own log destination, an attacker who takes it over can erase the record of the takeover, and the log is worth nothing at the moment it matters most. Writing to a separate account with append-only permissions and object locking preserves the evidence, which is why it is a standard requirement rather than a refinement.
No comment is present. Be the first to comment.
Loading…
Post your comment
Please log in or register to post a comment.
Examination Categories
- SSC Exams
- Banking Exams
- Teaching Exams
- Civil Services Exams
- Railways Exams
- Engineering Recruitment Exams
- Defence Exams
- State Government Exams
- Police Exams
- Insurance Exams
- Nursing Exams
- Other Government Exams
- NRA CET
- PG Entrance Exams
- Campus Placement
- MBA Entrance Exams
- CUET and UG Entrance
- Judiciary Exams
- Regulatory Body Exams
- Software Development