Which statements about log files are true?

• A. Log files should be read regularly.
• B. External auditing should be conducted periodically.
• C. Automatic alerts should be established.
• D. All of the above

Answer: (D)

Log files provide visibility into what happens across systems, applications, and security devices, giving you a record of events, actions, and timings. Reading these logs regularly helps you spot anomalies, track user activity, and detect suspicious patterns like repeated failed logins, unusual access times, or configuration changes. External auditing adds an independent check on that data, verifying integrity, supporting regulatory compliance, and catching issues that might be missed by internal teams. Automatic alerts turn monitoring into action by immediately notifying you when predefined conditions occur, such as spikes in traffic, multiple failed authentications, or anomalous changes, enabling faster containment and response.

Together, these practices form a strong, proactive approach to log management: ongoing review for situational awareness, independent verification for trust and compliance, and real-time alerts for timely defense. That’s why all of the above is the best choice, since each element reinforces the others and contributes to a robust security monitoring posture.