PCI SSCPCI DSSMonitoring TestingEASYFree question
What information must each audit log entry contain?
- A.User ID, source IP address, date/time, session duration, transaction amount, and the name of the QSA who last reviewed the log
- B.User ID, geolocation of the user, date/time, browser version, and the department of the account owner
- C.User ID, event type, date/time, success/failure, origination of event, and identity or name of affected data/system/resource
- D.Event type, date/time, severity score, application version, and the hostname of the log collector
Why C is correct
PCI DSS requires comprehensive log entries containing user identification, event type, timestamp, outcome, event origin, and affected component or resource.
Know someone studying for PCI DSS? Send them this one.