ISC Practice Question: Systems Security Implementation Verification And Validation
During a validation exercise, you need to confirm that an application's logging mechanism is compliant with NIST SP 800-92. Which element must be verified?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ensure every log entry contains a user ID, timestamp, and event outcome.
NIST SP 800-92 emphasizes that logs must include user IDs, timestamps, and success/failure status.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Ensure every log entry contains a user ID, timestamp, and event outcome.
Why this is correct
These fields are essential for accountability and forensic analysis as outlined in the guidance.
- ✗
Check if logs are printed to the console.
Why it's wrong here
This is a poor practice and insecure; logs should be sent to a secure, centralized location.
- ✗
Confirm that the logging level is set to 'DEBUG'.
Why it's wrong here
DEBUG level often contains excessive, non-security relevant information and may store sensitive data.
- ✗
Verify that all logs are stored in a database.
Why it's wrong here
NIST does not mandate a specific storage format, only that they are protected and accessible.
About these practice questions
This ISC question is part of Courseiva's 209-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.