Data items to capture for a security audit trail include:
A) events related to the security mechanisms on the system
B) operating system access
C) remote access
D) all of the above

Question

Quizplus · Accepted Answer

All of the options listed are important data items to capture in a security audit trail. Events related to security mechanisms on the system can include failed login attempts, changes to user permissions, and firewall rules. Operating system access can include any login attempts or changes made to the system. Remote access can include any attempts to access the system from outside the network, such as through a VPN connection. Capturing all of these data items can help to identify any potential security threats or breaches on the system.

Data Items to Capture for a Security Audit Trail Include