4.4 Architect Identity Accounting ISSAP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a specific audit event that should be logged for identity and access management?

   • ASuccessful authentication
   • BDisk usage statistics
   • CNetwork packet capture
   • DCPU temperature readings
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A financial institution is required to retain IAM audit logs for seven years to meet regulatory requirements. The logs are stored in a log management system that uses standard storage. The institution is concerned about the cost of storing logs for seven years. Which approach is most cost-effective while maintaining log integrity?

   • AReduce the number of audit events logged to decrease storage usage, allowing logs to be kept for seven years.
   • BStore logs in a compressed format on the log management system and extend the retention period to seven years.
   • CExport logs to an object storage service with lifecycle policies that transition logs to lower-cost storage tiers over time, and enable versioning to maintain integrity.
   • DStore logs on tape media and keep them in an offsite facility for seven years.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of establishing alerting and notification mechanisms for audit log events?

   • ATo enable timely response to security incidents and policy violations
   • BTo encrypt log data at rest
   • CTo replace the need for manual log review
   • DTo reduce the volume of logs generated
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of log analysis and reporting in identity and access management?

   • ATo increase the number of logs generated
   • BTo replace the need for authentication
   • CTo detect anomalies and support investigations
   • DTo reduce the need for user training
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A multinational corporation must retain IAM audit logs for five years to comply with GDPR data protection requirements. The logs contain personal data of EU citizens. The organization uses a cloud-based IAM service that stores logs in a single region. To ensure data residency and protect log integrity, which strategy should the organization implement?

   • ARetain logs for only one year to minimize the amount of personal data stored, and then delete them.
   • BStore logs in the cloud provider's region within the EU and enable write-once-read-many (WORM) storage to prevent tampering.
   • CStore logs on-premises in the organization's headquarters, which is outside the EU, and implement strong access controls.
   • DStore logs in any region and rely on encryption at rest to protect personal data.
   Reveal Solution Discussion Select an answer first