Logs created to monitor suspicious activity or security violations in the MLTC are called?

• A. Firewall Protection
• B. CENTRIXS Virtual Server
• C. Standalone Host
• D. Audit Logs

Answer: (D)

Audit logs are records that capture security-related events so you can monitor for suspicious activity. They provide a detailed, time-stamped trail of what happened, who performed each action, and whether it succeeded or failed. This information is essential for detecting unauthorized access, investigating incidents, and demonstrating compliance with security policies. In the MLTC context, these logs document attempts to access systems, changes to permissions, and alerts from security controls, enabling analysts to spot anomalies and understand the sequence of events.

Other options describe protective or structural elements rather than the records kept to monitor activity. Firewall protection is about blocking or allowing traffic, a CENTRIXS virtual server is a type of server instance, and a standalone host is a single computer; none of these are the recorded activity trail used for security monitoring.