Multiple choice technology security

Credit card numbers should be logged into the log file during exception

  1. No. Because leads to insecure storage of private information of the customer

  2. Yes. Because it is a good logging practice to log all relevant information during an exception

  3. Yes. Because it will help in troubleshooting specific customer problems

  4. No. Because its an additional over head
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Credit card numbers are sensitive financial data that must never be logged in plaintext. Doing so violates PCI DSS compliance and creates severe security risks if logs are compromised or accessed inappropriately. 'Good logging practice' (B) and 'troubleshooting' (C) are invalid justifications - security takes precedence. The 'overhead' argument (D) is irrelevant; the issue is security, not performance.

Keep practicing — related questions