🛡️ Free practice test question from: Types of Data Logs (Security+)

Security logs are specifically designed to record security-related events on a system. These events include:

> Authentication attempts (successful and failed): Tracking logins and failed login attempts is crucial for identifying potential brute-force attacks or unauthorized access attempts.

> Password changes: Logging password changes helps in auditing and investigating potential compromises.

> User privilege modifications: Recording changes to user permissions is essential for ensuring accountability and detecting unauthorized privilege escalation.

******

Firewall logs primarily record network traffic and firewall activity, such as blocked or allowed connections.

System logs capture general system events, such as startup/shutdown, hardware errors, and driver issues.

Application logs record events specific to individual applications, such as errors, warnings, and informational messages.