Which of the following is a recommended log-management practice?

• A. Read logs regularly
• B. External auditing
• C. Automatic alerts
• D. All of the above

Answer: (D)

Continuous visibility, real-time alerting, and independent verification define effective log management. Reading logs regularly gives ongoing visibility into system activity, helping you spot anomalies, troubleshoot issues, and demonstrate compliance. Automatic alerts translate that visibility into immediate action, so security staff are notified or automated responses trigger when suspicious activity or policy violations occur. External auditing provides an objective check of your logging controls—retention policies, integrity, access restrictions, and overall effectiveness—giving reassurance to stakeholders and helping uncover gaps that internal reviews might miss. When these elements are combined, you have a robust log-management approach that covers detection, response, and assurance, so all of these practices together are the recommended path.