Question

When securing a system, why is it important to audit failed attempts to access files?

Answer 1

Answer:

Auditing failed attempts are important because it helps keep track of the activities which may have been attempts to access the secure files without proper authentication. It is important for the security of the sensitive information in the system.

Auditing ensures the safe and secure environment for a system where all the sensitive and important data remains safe by keeping the unauthorized users from accessing it.

Explanation:

Solution

When a failure auditing is enabled, the every time unsuccessful tries to access the files by a user occurs, an audit entry is generated. the files server auditing is a very crucial step towards securing a system.

With a record of all failed trial made to access the file, investigations in a case of breach in data is quite simple. it also helps is identifying the client computer from which the failed attempts were carried out.

Therefore, file auditing is very necessary in securing a system.