iSACA Cybersecurity Fundamentals Certification Practice Exam

What is the purpose of maintaining logs in an organization's systems?

1. To monitor security and detect risks

2. To enhance data storage capacity

3. To manage employee internet usage

4. To regulate power consumption

The correct answer is: To monitor security and detect risks

Maintaining logs in an organization's systems primarily serves the purpose of monitoring security and detecting risks. Logs are essential for capturing a detailed record of activities within a system, including user actions, system events, and data access. By analyzing these logs, security teams can identify unusual patterns that may indicate security breaches, unauthorized access attempts, or other potential threats. This proactive monitoring helps organizations to quickly respond to incidents, conduct forensic investigations, and improve overall security posture. The other options do not align with the primary function of logs. While managing employee internet usage may involve some form of logging for compliance and oversight, it is not the primary purpose of system logs. Enhancing data storage capacity and regulating power consumption are operational aspects that do not connect directly to the main use of logs in achieving security objectives. Therefore, the emphasis on monitoring security and detecting risks is the most accurate reason for maintaining logs in an organization's systems.