Auditing and Monitoring Cloud Resources CSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary difference between logs and metrics in cloud monitoring?

   • ALogs are textual records of events, while metrics are numerical measurements over time
   • BLogs are only used for security, while metrics are only used for performance
   • CLogs are numerical measurements, while metrics are textual records of events
   • DLogs are stored permanently, while metrics are deleted after 24 hours
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a key consideration when managing logs for auditing purposes in the cloud?

   • ADeleting logs immediately after an audit to reduce storage costs
   • BKeeping logs in plain text so they are easy to read
   • CEnsuring logs are stored securely and protected from tampering
   • DStoring logs only in the region where the resource is hosted
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security analyst needs to investigate a suspected data exfiltration incident that occurred last week. The organization uses Google Cloud Platform (GCP). Which log source is most likely to provide the necessary evidence?

   • AVPC Flow Logs only, because they show all network traffic.
   • BCloud Monitoring metrics, because they show resource utilization spikes.
   • CCloud Audit Logs, specifically Admin Activity and Data Access logs.
   • DCloud Billing reports, because they show data transfer costs.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   After an audit, a company received a finding that its cloud resources are not tagged consistently, making it difficult to track costs and ownership. The audit report recommends remediation. Which remediation is most effective?

   • AIgnore the finding because tags are not a security control.
   • BImplement a tagging policy enforced by automated tools that require tags on new resources and periodically correct existing ones.
   • CManually tag all existing resources once and consider the issue resolved.
   • DAsk the cloud provider to apply tags automatically to all resources.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A healthcare organization must comply with HIPAA and is using a public cloud provider. They want to ensure their auditing and monitoring practices meet HIPAA requirements. Which action is most directly required?

   • ADisable logging to reduce the risk of exposing PHI in logs.
   • BImplement logging and monitoring of access to protected health information (PHI) and retain audit trails as required by HIPAA.
   • CRely solely on the cloud provider's HIPAA certification to ensure compliance.
   • DUse only manual audits because automated monitoring is not allowed under HIPAA.
   Reveal Solution Discussion Select an answer first