Study. uk . com
  1. Home
  2. All questions
  3. Question 495

CISSP study material · question 495 of 500

An application logs successful logins but not failed ones. How does OWASP's 2025 logging entry treat this?

  1. As a privacy improvement, since failed attempts may reveal credentials.
  2. As acceptable, provided the authentication service logs failures separately.
  3. As a logging failure, since auditable events logged inconsistently leave exactly the records an investigator needs missing.
  4. As a performance optimisation with no security consequence.
Show the answer

Answer: C. As a logging failure, since auditable events logged inconsistently leave exactly the records an investigator needs missing.

OWASP names auditable events such as logins, failed logins and high-value transactions not being logged or logged inconsistently, giving logging successful logins but not failed attempts as its example.

Source: OWASP Top 10 A09:2025 (OWASP) — OWASP Top 10:2025 A09 Security Logging and Alerting Failures > Description

Challenge yourself on this topic → Study as cards