Cyber Defense · lesson 7 of 12 · 10 min

Why logs matter

summary: Logs provide evidence for detection, investigation, and recovery. They can show authentication activity, configuration changes, errors, and patterns over time.

question: What is a key value of security logs?

options:

• They provide investigation evidence
• They replace backups
• They eliminate all risk
• They make passwords unnecessary

correct: They provide investigation evidence

explanation: Logs help teams understand what happened and when.

---

Previous lesson: Hashing and integrity
Back to Cyber Defense
Next lesson: Log analysis lab