Logging and Security Quiz

Which term describes the requirement that all activities affecting user state or balances are formally tracked?

• Traceable

• Auditable

• High Integrity

• Fail Safe

Which logging requirement ensures that logs CANNOT be overwritten or tampered with by local or remote users?

• Auditable

• Traceable

• High Integrity

• Dual Purpose

Which requirement means it is possible to determine WHERE an activity occurs across all tiers of an application?

• Auditable

• High Integrity

• Traceable

• Fail Safe

What does a 'Fail Open' system do when an error or exception is encountered?

• Blocks all access

• Allows access

• Shuts down the server

• Deletes the session

What does a 'Fail Closed' system do when an error or exception is encountered?

• Allows access

• Logs the error and continues

• Blocks access

• Notifies the admin

A user is purchasing a digital album for immediate download. An error occurs during credit card verification. What should the application do?

• Fail open and allow the download

• Fail closed and block the download

• Retry automatically without logging

• Ask the user to try again without checking

A user purchases a vinyl album to be physically shipped. An error occurs during credit card verification. What is the best approach?

• Fail closed immediately

• Fail open and reattempt billing before shipping

• Cancel the order automatically

• Block all future purchases from the user

Fail Safe is a best practice that relates to what?

• How logs are stored

• How an application behaves when errors and exceptions are encountered

• How debug messages are displayed

• How audit logs are protected

Dual Purpose Logs are designed to serve which TWO purposes?

• Debug and performance monitoring

• Validate automatic log/event correlation output AND serve as source evidence in court

• Backup and encryption

• Error reporting and anomaly detection

Why must audit logs be legally protected?

• Because they take up too much disk space

• Because they may be unusable as court evidence if not protected

• Because they contain admin passwords

• Because they slow down the application