Design and Implement Auditability, Traceability, and Accountability of Data Events CCSP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which attribute is most useful for determining the physical or logical location from which a data event originated?

   • AGeolocation
   • BUser identity
   • CEvent type
   • DResource ID
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of an audit trail in the context of non-repudiation?

   • ATo provide real-time alerts for security incidents
   • BTo provide a chronological record of events that can be used to verify actions
   • CTo encrypt data at rest
   • DTo compress log files for storage efficiency
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which log analysis technique is most appropriate for supporting a forensic investigation of a data breach?

   • ADeleting logs that are not relevant to the investigation
   • BCorrelating multiple log sources to reconstruct the sequence of events
   • CEncrypting logs to protect confidentiality
   • DCompressing logs to reduce storage space
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which log analysis technique is most effective for detecting a user accessing data at an unusual time of day?

   • AAnomaly detection based on baseline behavior
   • BCorrelating logs with weather data
   • CKeyword search for 'unusual' in log messages
   • DCounting the total number of log entries
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a key consideration when determining log retention periods?

   • AThe number of users in the organization
   • BThe storage cost of the logs
   • CThe size of the log files
   • DCompliance requirements and organizational policy
   Reveal Solution Discussion Select an answer first