Multiple choice technology security

Credit card numbers should be logged into the log file during exception

  1. No. Because leads to insecure storage of private information of the customer

  2. Yes. Because it is a good logging practice to log all relevant information during an exception

  3. Yes. Because it will help in troubleshooting specific customer problems

  4. No. Because its an additional over head

Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Logging sensitive customer information like credit card numbers creates security vulnerabilities and violates PCI-DSS compliance requirements. Log files can be accessed by unauthorized personnel or leaked in data breaches. The overhead argument is irrelevant compared to the security risk.