A company is required to retain security logs for a minimum of one year for compliance. The logs are currently stored in a SIEM that has limited storage capacity. The security team needs to ensure logs are available for analysis while managing storage costs. Which approach is MOST appropriate?

Archive logs to a low-cost storage solution after a shorter retention period in the SIEM.

Store all logs in the SIEM for one year, regardless of storage costs.

Delete logs older than 30 days to reduce storage costs.

Store logs only in the SIEM for the first month, then rely on backups.

Which of the following is a common methodology used in vulnerability assessments?

Reviewing only network architecture diagrams

Automated scanning of systems for known vulnerabilities

Manual exploitation of every identified vulnerability

Social engineering attacks on employees

During an incident response, the team has successfully contained a malware infection and eradicated the threat from affected systems. What is the NEXT phase in the incident response process?

Containment, where the team isolates the affected systems.

Detection, where the team identifies other affected systems.

Recovery, where systems are restored to normal operation.

Lessons learned, where the team reviews the incident and identifies improvements.

Certified Cloud Security Professional

Domain 5Objective 6

Manage Security Operations CCSP Practice Questions (Page 7)

Part of the Cloud Security Operations domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

17%of the exam

Questions 31–33

31expert · hard
A company is required to retain security logs for a minimum of one year for compliance. The logs are currently stored in a SIEM that has limited storage capacity. The security team needs to ensure logs are available for analysis while managing storage costs. Which approach is MOST appropriate?
Select an answer first
32foundation · easy
Which of the following is a common methodology used in vulnerability assessments?
Select an answer first
33application · medium
During an incident response, the team has successfully contained a malware infection and eradicated the threat from affected systems. What is the NEXT phase in the incident response process?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Manage Security Operations CCSP Practice Questions (Page 7)

Questions 31–33

A company is required to retain security logs for a minimum of one year for compliance. The logs are currently stored in a SIEM that has limited storage capacity. The security team needs to ensure logs are available for analysis while managing storage costs. Which approach is MOST appropriate?

Which of the following is a common methodology used in vulnerability assessments?

During an incident response, the team has successfully contained a malware infection and eradicated the threat from affected systems. What is the NEXT phase in the incident response process?

Keep studying — Cloud Security Operations