Security audit logging in Jenkins - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is security audit logging in Jenkins?

Security audit logging in Jenkins records user actions and system events to help track changes and detect unauthorized activities.

beginner

Which Jenkins plugin is commonly used for security audit logging?

The 'Audit Trail' plugin is commonly used to log user actions and system events in Jenkins for security auditing.

intermediate

How do you enable audit logging in Jenkins using the Audit Trail plugin?

Install the Audit Trail plugin, then configure it under 'Manage Jenkins' > 'Configure System' to specify log file location and events to record.

intermediate

Why is it important to secure audit log files in Jenkins?

Securing audit logs prevents tampering or deletion, ensuring the integrity of records for accurate security investigations.

intermediate

What kind of events should be logged for effective security auditing in Jenkins?

Important events include user logins, configuration changes, job executions, permission changes, and plugin installations.

Which Jenkins plugin helps with security audit logging?

A Git Plugin

B Audit Trail

C Pipeline

D Blue Ocean

The Audit Trail plugin records user actions and system events for security auditing.

Where do you configure the Audit Trail plugin in Jenkins?

A Build Executor Status

B Manage Plugins

C Manage Jenkins > Configure System

D New Item

Audit Trail settings are configured under 'Manage Jenkins' > 'Configure System'.

Why should audit logs be protected in Jenkins?

A To reduce disk space

B To speed up builds

C To improve UI appearance

D To prevent unauthorized changes to logs

Protecting logs ensures their integrity for security investigations.

Which event is NOT typically logged in Jenkins audit logs?

A CPU temperature

B Job execution

C Plugin installation

D User login

CPU temperature is not related to security audit logging.

What is the main purpose of security audit logging in Jenkins?

A Track user actions and detect unauthorized activity

B Improve build speed

C Manage plugins automatically

D Backup job configurations

Audit logging helps track actions and detect security issues.

Explain how to set up security audit logging in Jenkins using the Audit Trail plugin.

Think about plugin installation and configuration steps.

Why is it important to protect audit logs in Jenkins and what events should be logged?

Consider security and important user/system actions.