Which statement about time data is accurate?

Which statement about time data is accurate?

• A. Time data is optional for non-critical systems.
• B. Time data should be archived indefinitely without protection.
• C. Time data must be protected.
• D. Time data is not relevant to audit logs.

Answer: (C)

Time data in logs is essential for establishing an accurate timeline of events, which is crucial for investigations, forensics, and auditing. Because audit trails rely on trustworthy timestamps, protecting time data helps prevent tampering that could hide unauthorized activity or confuse incident analysis. PCI DSS requires protecting logs and event data, including their timestamps, to maintain their integrity and reliability. It isn’t optional for any system that maintains logs, and it is relevant to audit processes, so statements suggesting unprotected, indefinite archiving or irrelevance are not correct.

Time data in logs is essential for establishing an accurate timeline of events, which is crucial for investigations, forensics, and auditing. Because audit trails rely on trustworthy timestamps, protecting time data helps prevent tampering that could hide unauthorized activity or confuse incident analysis. PCI DSS requires protecting logs and event data, including their timestamps, to maintain their integrity and reliability. It isn’t optional for any system that maintains logs, and it is relevant to audit processes, so statements suggesting unprotected, indefinite archiving or irrelevance are not correct.