Certified Information Systems Security Professional (CISSP) — Question 319

Which of the following is the PRIMARY reason for selecting the appropriate level of detail for audit record generation?

Answer options

• A. Avoid lengthy audit reports
• B. Enable generation of corrective action reports
• C. Facilitate a root cause analysis (RCA)
• D. Lower costs throughout the System Development Life Cycle (SDLC)

Correct answer: C

Explanation

The primary purpose of selecting the right level of detail for audit records is to facilitate a root cause analysis (RCA), which helps identify underlying issues effectively. The other options, while relevant to audit processes, do not directly address the need for detail in supporting RCA, which is crucial for understanding and solving problems.