Greatest Concern for Application Log Integrity?

CRISC By islever Editorial Last updated Sep 2, 2026

Short answer

D Weak privileged access management controls

Question

Which of the following situations would cause the GREATEST concern around the integrity of application logs?

Lack of a security information and event management (SIEM) system
Lack of data classification policies
Use of hashing algorithms
Weak privileged access management controls Correct Answer

Key Takeaways

This question tests the understanding that while SIEM monitors logs, weak privileged access management actually enables the unauthorized modification or deletion of logs, which is the direct definition of an integrity failure.

Weak privileged access management controls pose the greatest risk to application log integrity by allowing authorized users to tamper with or delete logs without detection. The community consensus strongly identifies this as the primary vulnerability over the lack of a SIEM system.

Common mistake: Choosing A (Lack of SIEM) is a common mistake because students confuse monitoring tools with the root cause of data tampering, failing to realize that weak access controls allow the tampering to happen in the first place.

Expert Analysis

Why the Answer Is Correct

Weak privileged access management (PAM) controls allow individuals with elevated permissions to alter, delete, or inject false data into application logs. If an administrator can modify logs to hide malicious activity, the fundamental integrity of the audit trail is destroyed. This represents a direct and severe threat to the non-repudiation and forensic value of the logs.

Why the Other Options Are Wrong

Option A is incorrect because while a SIEM aids in detecting integrity issues, its absence does not cause the tampering itself. Option B is incorrect because data classification pertains to sensitivity and handling requirements, not the fundamental immutability of log data. Option C is incorrect because hashing algorithms are a technical control specifically designed to verify and protect integrity, making their use a positive security measure rather than a risk.

Community Comment Notes

Comments highlight that weak PAM allows insiders to cover their tracks by deleting logs, emphasizing the need to prevent administrators from altering logs within their own scope. One dissenting comment suggested A, arguing PAM is for confidentiality, but the majority correctly identifies that limiting write access is the primary control for ensuring data integrity.

Exam Strategy

When answering questions about data integrity, focus first on who has the ability to modify the data. If access controls are weak, the data can be changed regardless of whether monitoring tools like SIEM are present.

Community Votes

75%

25%

75% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

efe6fee 👍 1 Answered D

Logs may contain information that is sensitive or needed for forensic purposes, so they should be configured in ways that prevent alteration or deletion as well as preventing access by authorized personnel. In particular, they should be implemented in ways that prevent administrators with responsibility for systems or applications from altering or deleting logs made against their own scopes of responsibility. The risk practitioner should consider log access pennissions as part of evaluating the level of potential insider threat.
Sara98 👍 1 Answered D

If privileged access management controls are weak, it increases the risk that individuals with elevated permissions could alter, delete, or tamper with logs without detection. This poses a direct threat to the integrity of the logs, as unauthorized changes could go unnoticed.
Radko96 👍 1 Answered A

It's not correct. D. Acces privileged controls the confidenciality, not the integrity. A SIEM (tracking changing logs) protect the integrity of the application.
Bisibaby 👍 1 Answered D

Strong privileged access control can ensure data integrity by limiting who has access to data.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All CRISC Questions

Access 332 questions with complete answers and detailed explanations.

View Full CRISC Practice Test →

← Back to CRISC Study Guide