Cybersecurity and Digital Forensics Practice Test

Logging is about creating traceable records that help security monitoring and incident response while protecting privacy. Timestamps anchor when events happened, making it possible to order activities and correlate across systems. Event descriptions give the context of what occurred, such as a login, file access, or configuration change. IP addresses show where the activity originated, aiding source identification and network forensics. Full names, however, are sensitive personal information. In practice, logs should minimize exposure of PII by using user IDs or usernames instead of real names, or by redacting names when possible. If names are included, they should be protected with strict access controls and retention policies. So the item you would not include in a log file is users’ full names.