Option A, "Investigate why logging is not occurring," is important, but does not provide any direct action to resolve the current issue. Enabling superuser activity logging is recommended as a fundamental solution to the issue.
If super-user activity is not being recorded in system logs, it poses a significant risk as it could allow unauthorized or inappropriate actions to go unnoticed.
So , C is right answer
As an IS auditor, the best course of action when noting the absence of super-user activity in system logs is to investigate the reason for the lack of logging.
recommending activation of super-user activity logging, is not the best course of action because it assumes that the absence of logging is due to a lack of configuration rather than a deeper issue. Before recommending activation of super-user activity logging, it is important to investigate the root cause of the lack of logging to ensure that it is not a deliberate attempt to hide activity.
upvoted 2 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Swallows
4 months agoSibsankar
7 months, 3 weeks ago3008
1 year, 3 months agoChangwha
1 year, 3 months ago3008
1 year, 3 months ago