@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix schema: <https://schema.org/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

<https://knobit.org/id/task/dsec-monitoring-audit/C1> a edu:Question ;
    rdfs:label "C1 (2 points)"@en ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    schema:hasPart <https://knobit.org/id/register/data-security#SE-501>,
        <https://knobit.org/id/register/data-security#SE-502> ;
    schema:identifier "C1" ;
    schema:position 1 ;
    schema:text "Log integrity, 1 each. (a) The DBA audit log is a table in the card management database, and the audit log excerpt shows a DBA truncating it: the people the log records can alter it. (b) Integrity is separated from them: logs shipped to a SIEM or write-once store the DBAs cannot change or delete, and the truncation raised as an incident."@en .

edu:Question rdfs:label "Question"@en,
        "Küsimus"@et .

<https://knobit.org/id/register/data-security#SE-501> rdfs:label "dsec-monitoring-audit C1: DBAs can truncate the audit table that records them"@en .

<https://knobit.org/id/register/data-security#SE-502> rdfs:label "dsec-monitoring-audit C1: log integrity separated from the people logged"@en .