Auditing and Monitoring Cloud Resources CSE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   During a compliance audit, the auditor requires proof that a specific administrative action was performed on a cloud resource three months ago. The organization uses AWS. Which action should the organization take to ensure the evidence is available and admissible?

   • ARetrieve the CloudTrail log for that date from the S3 bucket where logs are stored with versioning and MFA delete enabled.
   • BCheck the resource's current configuration tags to see if the action was performed.
   • CUse the AWS Management Console's activity feed to view past actions.
   • DAsk the administrator to provide a written statement confirming the action.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A healthcare company must comply with HIPAA and wants to use a cloud provider's monitoring tools to help meet the Security Rule's requirements for audit controls. What should the company do to map its monitoring practices to HIPAA?

   • ARely on the cloud provider's HIPAA certification to cover all the company's monitoring obligations.
   • BDisable logging for all services to avoid storing protected health information in logs.
   • CIdentify the HIPAA controls that apply to their cloud environment and configure the provider's monitoring and logging services to collect the required audit data.
   • DEnable all possible monitoring features on every service, regardless of relevance to HIPAA.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company's compliance officer wants to understand how cloud auditing differs from traditional on-premises auditing. Which statement accurately describes a key difference?

   • ACloud auditing does not require any evidence from the customer because the provider is fully responsible for compliance.
   • BCloud auditing often relies on evidence provided by the cloud provider, such as SOC 2 reports, in addition to the customer's own logs.
   • CCloud auditing is only necessary for public clouds, not private clouds.
   • DCloud auditing eliminates the need for continuous monitoring because the provider handles everything.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An auditor is collecting evidence from a cloud environment and needs to ensure that logs have not been altered. Which practice is most important for preserving the integrity of audit evidence?

   • AStore logs in an immutable, write-once storage bucket with strict access controls.
   • BKeep logs only in the cloud provider's default log retention period.
   • CCopy logs to a shared drive where all team members can access them.
   • DAllow administrators to edit logs to correct any errors.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How do compliance frameworks influence cloud auditing practices?

   • AThey only apply to on-premises data centers and not to cloud environments
   • BThey are optional guidelines that have no impact on audit scope
   • CThey provide a set of controls and requirements that audits are designed to verify
   • DThey replace the need for internal audits by providing automated compliance
   Reveal Solution Discussion Select an answer first