Auditing and Monitoring Cloud Resources CSE Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   How does continuous monitoring support ongoing compliance and governance?

   • ABy ensuring that no security incidents ever occur
   • BBy eliminating the need for compliance documentation
   • CBy automatically generating final audit reports without human review
   • DBy detecting deviations from policies in real time, allowing for prompt corrective action
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A company runs a production web application on a cloud provider. The security team needs to detect unauthorized configuration changes to the virtual network and compute resources in near real time, and they want a single dashboard to review both configuration changes and operational metrics. Which approach should they implement?

   • AEnable verbose logging on the application and store logs in the application's local storage for later review.
   • BDeploy an agent on each virtual machine that sends only CPU and memory metrics to a separate monitoring service.
   • CEnable cloud-native activity logging for configuration changes and stream those logs to a centralized monitoring tool that also ingests resource metrics.
   • DConfigure periodic manual snapshots of the network configuration and compare them weekly against a baseline.
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which element is most important to include when defining the scope of a cloud audit?

   • AThe names of all employees with access to the cloud environment
   • BThe total monthly cost of the cloud services being used
   • CThe brand of the cloud provider's hardware
   • DThe specific cloud services, regions, and data types to be audited
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A company runs a critical application on a cloud virtual machine. They need to detect a security breach quickly, but they are concerned about the cost of storing large volumes of logs. They also want to avoid alert fatigue. Which monitoring strategy best balances detection speed, cost, and alert noise?

   • AStore all logs in the same high-cost, real-time analytics platform and alert on every log entry.
   • BDisable logging for the virtual machine to reduce cost and avoid alert fatigue.
   • CCollect only CPU and memory metrics and alert when they exceed a threshold.
   • DStream security-relevant logs to a SIEM with real-time alerting rules, while storing verbose logs in a low-cost archive for forensic investigation.
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   An organization uses a hybrid cloud with on-premises servers and AWS. They want to automate compliance monitoring across both environments. The team is small and cannot maintain complex custom integrations. Which solution best meets the requirement with minimal operational overhead?

   • AUse AWS Config with the multi-account and hybrid capabilities, and integrate on-premises servers via the AWS Management Agent.
   • BUse only on-premises monitoring tools and manually export AWS logs.
   • CDeploy a separate third-party SIEM for each environment.
   • DBuild a custom script that periodically checks both environments and sends email alerts.
   Reveal Solution Discussion Select an answer first