Plan and Implementation of Security Controls CCSP Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   What is the primary purpose of correlating logs from multiple sources?

   • ATo reduce the storage space required for logs
   • BTo encrypt logs for secure transmission
   • CTo automatically patch vulnerabilities
   • DTo identify security incidents that may not be visible in a single log source
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company is required to retain audit logs for at least one year and be able to correlate logs from multiple cloud services to detect security incidents. Which approach should they take?

   • AUse a third-party log management tool but only for real-time monitoring, not retention.
   • BStore logs in each service's native logging and export them to a central SIEM for correlation.
   • CStore logs locally on each VM and rely on the cloud provider to retain them.
   • DEnable logging only for critical services and store logs in the service's default location.
   Reveal Solution Discussion Select an answer first