Timely Review of System Access Audit Records - Basic Security Functions

Timely Review of System Access Audit Records

Prev Question Next Question

Question

A timely review of system access audit records would be an example of which of the basic security functions?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

By reviewing system logs you can detect events that have occured.

The following answers are incorrect: avoidance.

This is incorrect, avoidance is a distractor.

By reviewing system logs you have not avoided anything.

deterrence.

This is incorrect because system logs are a history of past events.

You cannot deter something that has already occurred.

prevention.

This is incorrect because system logs are a history of past events.

You cannot prevent something that has already occurred.

The answer to this question is D. detection.

System access audit records contain information about who accessed the system, when they accessed it, what actions they took while accessing it, and other relevant details. By reviewing these records in a timely manner, security administrators can detect any unauthorized access or suspicious activities on the system.

Detection is one of the basic security functions, which refers to the ability to identify security incidents, such as unauthorized access, data breaches, or other malicious activities. Detection is crucial in order to respond promptly to security incidents and prevent them from causing further damage.

In contrast, avoidance, deterrence, and prevention are other basic security functions:

  • Avoidance refers to the strategy of eliminating or reducing the risk of a security incident by avoiding the situation that could cause it. For example, a company may avoid using a particular software application that has known security vulnerabilities.

  • Deterrence refers to the strategy of discouraging potential attackers by making it clear that the security measures in place are strong and effective. For example, a company may post signs warning of surveillance cameras and security guards to deter would-be intruders.

  • Prevention refers to the strategy of implementing security measures to prevent security incidents from occurring. For example, a company may implement access controls and authentication mechanisms to prevent unauthorized access to a system.

In summary, timely review of system access audit records is an example of the detection function of security, which is one of the basic security functions along with avoidance, deterrence, and prevention.