Certified SOC Analyst (CSA) — Question 38

Which of the following is a default directory in a Mac OS X that stores security-related logs?

Answer options

• A. /private/var/log
• B. /Library/Logs/Sync
• C. /var/log/cups/access_log
• D. ~/Library/Logs

Correct answer: D

Explanation

The correct answer is D, as the ~/Library/Logs directory is where Mac OS X stores various application logs, including those related to security. Options A, B, and C refer to other log directories that do not primarily focus on security-related logs, making them incorrect in this context.