Study. uk . com
  1. Home
  2. All questions
  3. Question 496

CISSP study material · question 496 of 500

Which two shortcomings does OWASP identify where an application's logs live only on the machine that produced them? Choose two.

  1. They cannot be normalised into a common format.
  2. They cannot record enough user context to identify accounts.
  3. Their integrity is not protected from tampering.
  4. They are not properly backed up.
Show the answer

Answer: D. They are not properly backed up.
C. Their integrity is not protected from tampering.

OWASP lists logs stored only locally and not properly backed up, and log integrity not protected from tampering, among the conditions constituting logging and alerting failures.

Source: OWASP Top 10 A09:2025 (OWASP) — OWASP Top 10:2025 A09 Security Logging and Alerting Failures > Description

Challenge yourself on this topic → Study as cards