Continuous Security Monitoring Strategies CSE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of continuous security monitoring in a cloud environment?

   • ATo store all log data indefinitely for forensic analysis
   • BTo provide real-time visibility into security-relevant activity and detect potential threats as they occur
   • CTo replace the need for periodic security assessments and audits
   • DTo automatically remediate all security incidents without human intervention
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company uses a multi-cloud environment with AWS and Azure. They want to have a unified view of security monitoring across both clouds, including logs, metrics, and alerts. What is the most effective approach?

   • AUse Azure Monitor to collect AWS logs by installing agents on all AWS resources.
   • BUse AWS CloudTrail and Azure Monitor separately and manually correlate data.
   • CUse a third-party SIEM or security analytics platform that integrates with both AWS and Azure APIs.
   • DUse AWS Organizations to manage Azure resources.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company uses Azure for its cloud infrastructure. The security team wants to monitor sign-in logs for suspicious activity and receive alerts when a user fails to sign in multiple times. Which Azure service should they use?

   • AAzure Network Watcher, which monitors network traffic but not sign-in events.
   • BAzure Security Center (Defender for Cloud) only, which provides recommendations but not sign-in logs.
   • CAzure Activity Log, which records control-plane operations but not user sign-ins.
   • DAzure Monitor with the Sign-in Logs data source and an alert rule on failed sign-ins.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is designing a continuous security monitoring strategy for a new cloud environment. They want to ensure that the strategy provides real-time visibility and supports incident response. They have a limited budget and need to prioritize. What is the most important element to include?

   • AA sophisticated machine learning-based anomaly detection system.
   • BA large team of security analysts to review all alerts.
   • CCentralized collection of logs and metrics from all critical resources and services.
   • DA comprehensive set of compliance reports for auditors.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which Azure service provides a unified platform for collecting and analyzing logs and metrics from multiple Azure resources?

   • AAzure Active Directory
   • BAzure Policy
   • CAzure Monitor
   • DAzure Security Center
   Reveal Solution Discussion Select an answer first