Which logging controls should be evaluated for traceability and tampering resistance?

• A. Logs should be generated and replicated to a third-party service for tamper resistance
• B. Log generation and integrity controls, centralized storage, secure storage, rotation/retention, and monitoring for tampering
• C. Logs should be kept indefinitely without rotation
• D. Logging is unnecessary if encryption is used

Answer: (B)