Which sample-based audit technique has the auditor reconstruct events from logs?
A CISSP practice question covering Domain 7: Security Operations. Try answering before reading the explanation below.
Show options & answer
Why "Forensic timeline analysis" is the right answer
Timeline analysis reconstructs the sequence of events from log evidence. Pen tests probe security; code review examines source; phishing sims test user awareness. Timeline is a foundational forensic technique.
Study videos for this topic
Want to go deeper on Domain 7? Watch the full breakdown — every video is free, no account, no upsell.
Take the full CISSP practice test
120 questions, instant explanations, study-video links on every miss. No account.