Exam CISM topic 1 question 121 discussion

D. Log review "Identify"

D. Log review. The key word in the question is "identify" Log review involves examining logs and audit trails generated by the organization's systems and applications. It allows for the monitoring and detection of unusual or unauthorized activities, including instances where privileged users misuse their access rights. By analyzing logs, you can track actions taken by privileged users, identify anomalies, and detect any inappropriate or suspicious behavior.

D. Log review. The key word in the question is "identify" Log review involves examining logs and audit trails generated by the organization's systems and applications. It allows for the monitoring and detection of unusual or unauthorized activities, including instances where privileged users misuse their access rights. By analyzing logs, you can track actions taken by privileged users, identify anomalies, and detect any inappropriate or suspicious behavior.

Log review reveals all!

D. Log review

Need a thorough access control review to identify all possible reasons including, the review shall include monitoring and logging. Log review itself is not sufficiently enough.

D. Log review

The MOST helpful process in identifying privileged user misuse would be log review. This process involves examining logs from various systems and applications to detect any suspicious activity, such as unauthorized access, changes to permissions, or unusual login behavior

the correct answer is B

A log review is the process of analyzing system and security logs to identify potential security incidents. This process can reveal patterns of suspicious activity, such as a privileged user accessing sensitive data that they shouldn't have access to, or making changes to systems that they shouldn't be able to make. By reviewing the logs, the organization can identify violations of security policies and procedures, detect unusual or suspicious activity, and trace the activity back to the individual who performed it.