Design and Implement Auditability, Traceability, and Accountability of Data Events CCSP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a source of data events in a cloud environment?

   • AHypervisor logs that record virtual machine start and stop times
   • BPower management logs that record server reboot cycles
   • CApplication logs that record user actions such as file downloads
   • DNetwork switch logs that record MAC address table changes
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which mechanism provides non-repudiation for a data event by proving that a specific user performed the action?

   • AEncryption of the event record with a symmetric key
   • BDigital signature applied to the event record
   • CTimestamping the event record with a server clock
   • DCompression of the event record
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A multinational corporation must retain audit logs for at least seven years to comply with regulatory requirements. The logs are stored in a cloud object storage service. Which strategy ensures logs are retained for the required period while minimizing storage costs?

   • AStore logs only in memory for fast access
   • BDelete logs older than one year to reduce costs
   • CStore all logs in hot storage for seven years
   • DMove logs to cold storage after an initial period and apply a retention policy
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A cloud application allows users to transfer funds. The security team must ensure that users cannot deny initiating a transfer. They are considering implementing non-repudiation. Which mechanism provides the strongest non-repudiation?

   • ARequire users to sign each transfer request with their private key
   • BUse a shared secret for authentication
   • CLog the transfer with the user's IP address
   • DStore the transfer details in an audit log
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A financial services firm is designing a new audit logging system for its cloud-based trading platform. The compliance team requires that every data event be attributable to a specific user, even when users access the system from various locations. Which event attribute is essential to include to meet this requirement?

   • ATimestamp of the event
   • BUser identity (e.g., username or user ID)
   • CGeolocation of the user's device
   • DSource IP address
   Reveal Solution Discussion Select an answer first