Certified Information Systems Auditor (CISA) — Question 1049

An IS auditor is evaluating the log management system for an organization with devices and systems in multiple geographic locations. Which of the following is MOST important for the auditor to verify?

Answer options

• A. Log files are reviewed in multiple locations.
• B. Log files are encrypted and digitally signed.
• C. Log files of the servers are synchronized.
• D. Log files are concurrently updated.

Correct answer: C

Explanation

The correct answer is C because synchronizing log files ensures that all logs from different servers are consistent and can be correlated effectively. Option A is less critical since reviewing logs in multiple locations does not address synchronization. While options B and D are important for security and timeliness, they do not ensure the integrity and alignment of logs across systems.