CompTIA Security+ Exam Prep

Answer: C - Often, when an organization is suspicious of an employee’s activities, they observe their behavior when they are logged-on to their computer through keystroke monitoring. The person using this type of monitoring can have the characters written to an audit log to be reviewed at a later time. This type of auditing is usually done only for special cases and only for a specific amount of time, because the amount of information captured can be overwhelming and unimportant.