Audit Logging and Compliance Quiz

What you'll be asked

1. What is the primary purpose of maintaining immutable audit logs in a production environment?
2. When configuring an audit logging system to meet PCI-DSS compliance, which of the following data points is strictly prohibited from being logged?
3. An administrator notices that audit logs are consuming excessive storage space. What is the recommended best practice to manage this while maintaining compliance?
4. Which of the following scenarios represents a 'High-Severity' event that should trigger an immediate automated alert in an audit monitoring system?
5. In a distributed microservices architecture, why is centralized log aggregation critical for forensic analysis?

Answers and explanations come after you submit.