What is the role of logging integrity measures?

• A. To detect alterations through write-once logs, centralized storage, and cryptographic signing.
• B. To maximize logging frequency regardless of storage.
• C. To minimize the need for incident response.
• D. To allow any user to modify logs.

Answer: (A)

Logging integrity measures ensure that logs remain trustworthy by making it difficult to alter records without detection. Using write-once logs prevents editing after creation, centralized storage provides a single, authoritative repository less susceptible to tampering, and cryptographic signing allows you to verify both the origin and the integrity of the logs. This combination enables you to detect any changes, support accurate forensic analysis, and meet compliance requirements.

The other options miss the point: simply increasing logging frequency doesn’t address whether logs can be tampered with; incident response scope isn’t about preserving log integrity; and allowing anyone to modify logs would completely undermine trust in the logs.