Auditing and Monitoring Cloud Resources CSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of preserving audit evidence from cloud resources?

   • ATo maintain the integrity and availability of evidence for legal or compliance purposes
   • BTo automatically remediate security issues found during the audit
   • CTo reduce the amount of data stored in the cloud
   • DTo provide real-time alerts for suspicious activities
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company must retain security logs for 7 years to meet a regulatory requirement, but their cloud log storage costs are rising sharply. They also need to ensure that logs cannot be altered by an attacker who compromises a cloud administrator account. Which approach best balances cost and integrity?

   • ACompress logs and store them on a standard storage account without any retention policy, relying on the cloud provider to keep them indefinitely.
   • BStore logs in the default storage tier and grant all cloud administrators full access to modify or delete logs as needed.
   • CStore logs only in memory and periodically print them to paper for archival.
   • DStore logs in a low-cost, immutable storage tier with lifecycle policies that transition older logs to even cheaper archival storage, while maintaining write-once-read-many (WORM) protection.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which compliance framework is specifically designed for cloud service providers and includes controls for auditing and monitoring?

   • AHIPAA
   • BPCI DSS
   • CGDPR
   • DISO/IEC 27017
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   After a cloud audit, the report lists several findings, including one critical issue: a storage bucket is publicly readable. The company wants to address the findings in a way that demonstrates accountability and progress. What should they do?

   • ADelete the audit report and recreate the bucket with the same settings to avoid documentation.
   • BAcknowledge the findings in a board meeting but take no further action until the next audit.
   • CSend the audit report to the IT team and ask them to fix the issues as soon as they have time.
   • DCreate a remediation plan that assigns owners, sets deadlines, fixes the public bucket immediately, and tracks the status of all findings until closure.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization wants to move from periodic compliance reviews to a model where compliance status is always current and violations are addressed quickly. They have a mix of IaaS and PaaS resources. Which practice best supports continuous monitoring and improvement?

   • ASchedule a quarterly manual audit of all resources and document findings.
   • BEnable verbose logging on all resources and store logs without any automated analysis.
   • CRely on the cloud provider's compliance certifications to ensure ongoing compliance.
   • DDeploy automated configuration scanning and real-time log analysis, with alerts that trigger remediation workflows.
   Reveal Solution Discussion Select an answer first