Which of the following is typically not desirable to store in a system log?

• A. Users' full names
• B. Login attempts
• C. Access times
• D. Source addresses

Answer: (A)

Logs should minimize exposure of sensitive information while still capturing data needed for security monitoring. In practice, you want data that helps detect and investigate events, such as login attempts, when they occurred, and where requests came from. These elements allow you to build a timeline, identify suspicious activity, and trace origins of access. Personal identifiers like a user's full name are sensitive PII and usually unnecessary for security purposes; storing them in logs raises privacy risks and can run afoul of regulations if logs are exposed. Use non-identifying identifiers or hashed mappings instead, and log only what’s needed to investigate incidents.