Auditing and Monitoring Cloud Resources CSE Practice Questions (Page 11)

Questions 51–53

1. 51foundation · easy

   During the planning phase of a cloud audit, what is the first step an auditor should take?

   • AReport the audit findings to senior management
   • BCollect audit evidence from cloud logs and configurations
   • CRemediate any identified non-compliance issues
   • DDefine the audit scope, objectives, and criteria
   Reveal Solution Discussion Select an answer first
2. 52expert · hard

   A company is required to retain security logs for 7 years for compliance. They currently store logs in a cloud object storage service. The storage costs are rising, and the security team wants to reduce costs without compromising log integrity or availability. Which strategy is most appropriate?

   • AStore logs only in memory and not on persistent storage.
   • BCompress logs and store them in a single file without any indexing.
   • CMove older logs to a lower-cost storage tier (e.g., cold or archive) while keeping them immutable and accessible for audits.
   • DDelete logs older than 1 year to reduce storage costs.
   Reveal Solution Discussion Select an answer first
3. 53application · medium

   During an internal audit, the auditor identifies that a cloud database was accessed by an administrative account outside of normal business hours. The company must preserve evidence for a potential investigation. What is the most important action to take?

   • ADisable logging on the database to prevent further evidence from being generated.
   • BCopy the logs to a shared folder so all team members can review them quickly.
   • CPlace a legal hold on the relevant logs and store them in a separate, access-controlled location with a documented chain of custody.
   • DDelete the logs after taking screenshots of the relevant entries.
   Reveal Solution Discussion Select an answer first