Cloud Monitoring Fundamentals GCTD Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A company is deploying a cloud monitoring solution and must balance the need for comprehensive threat detection with a limited budget. They have a large volume of logs, but only a small security team to analyze them. Which approach best balances cost and effectiveness?

   • AUse only free tier monitoring tools provided by the cloud provider.
   • BStore all logs for the maximum retention period to ensure no data is lost.
   • CImplement a tiered log retention strategy, keeping high-value logs for longer and using automated analytics for initial triage.
   • DHire additional security analysts to manually review all logs.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security operations team is implementing a monitoring solution for a multi-account cloud environment. They need to ensure that all security logs are aggregated in a central location for analysis. What is the most effective approach?

   • AHave each account maintain its own logs and provide the security team with read-only access to each account.
   • BConfigure a centralized logging account that receives logs from all other accounts via cross-account log delivery.
   • CStore logs in each account and use a script to copy them to a central storage bucket weekly.
   • DUse a third-party tool that connects to each account's API and pulls logs periodically.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security analyst is responsible for monitoring a cloud environment that includes IaaS, PaaS, and SaaS services. What is the most effective way to maintain a comprehensive security posture?

   • AMonitor only the IaaS components, as they are the most critical for security.
   • BIntegrate monitoring data from all service layers into a centralized security information and event management (SIEM) system.
   • CUse separate monitoring tools for each service layer and review them independently.
   • DRely on the cloud provider's security monitoring for all service layers.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which activity best exemplifies the scope of cloud monitoring for threat detection?

   • ACreating a backup schedule for all databases to ensure data can be restored after an incident
   • BConfiguring a dashboard that displays CPU utilization and network latency for all virtual machines
   • CCollecting and analyzing API call logs to identify unauthorized access attempts and unusual patterns
   • DReviewing a monthly report of cloud spending to identify cost anomalies
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security operations center (SOC) is overwhelmed by a high volume of low-fidelity alerts from their cloud monitoring tools. The SOC manager wants to reduce alert fatigue while ensuring that genuine threats are still detected. Which strategy should they adopt?

   • AIncrease alert thresholds to reduce the number of alerts generated.
   • BDisable all monitoring for low-risk services to reduce alert volume.
   • CRoute all alerts to a single email distribution list for triage.
   • DImplement alert correlation and prioritization rules to group related alerts and focus on high-risk events.
   Reveal Solution Discussion Select an answer first