Multiple choice technology security

Credit card numbers should be logged into the log file during exception

  1. No. Because leads to insecure storage of private information of the customer

  2. Yes. Because it is a good logging practice to log all relevant information during an exception

  3. Yes. Because it will help in troubleshooting specific customer problems

  4. No. Because its an additional over head
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Logging sensitive information like credit card numbers during exceptions is a serious security violation. It creates insecure storage of PII (Personally Identifiable Information) and PCI DSS protected data in log files, which are often less protected than the main application database. This can lead to data breaches and compliance violations. The correct approach is to log that an error occurred without including the actual sensitive data.

Keep practicing — related questions