According to the Minimum Security Requirements (MSR) for Multi-User Operating Systems
(NISTIR 5153) document, which of the following statements pertaining to audit data recording is
incorrect?

A.
The system shall provide end-to-end user accountability for all security-relevant events

B.
The system shall protect the security audit trail from unauthorized access

C.
For maintenance purposes, it shall be possible to disable the recording of activities that require
privileges.

D.
The system should support an option to maintain the security audit trail data in encrypted
format