1.5 Identify and Describe Cost Optimization Methods (e.g., Scan Cadence, Duplicate Audit Logs) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company's cloud security platform ingests audit logs from multiple sources, including the cloud provider, the operating system, and the application layer. The security team discovers that the same user login event is being logged by all three sources. The log storage costs are rising, and the team wants to reduce them. What is the best approach to reduce costs while maintaining security visibility?

   • ADisable logging at the application layer and rely only on the cloud provider and operating system logs.
   • BConfigure the platform to deduplicate events based on a common event ID and store only one copy of each unique event.
   • CMove all audit logs to a cheaper storage tier without changing the ingestion pipeline.
   • DKeep all three sources and increase the log retention period to ensure complete data is available.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security team is responsible for a large cloud environment with thousands of workloads. The team uses a security platform that charges per workload per month. The team has identified that many workloads are over-provisioned and underutilized. The team wants to reduce security costs by right-sizing the workloads. What is the most effective approach?

   • AAnalyze the utilization metrics of each workload and resize them to match their actual usage patterns.
   • BDisable security monitoring for all underutilized workloads to reduce costs.
   • CReduce the size of all workloads to the smallest available instance type.
   • DIncrease the scan cadence for underutilized workloads to reduce the number of scans.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What does resource right-sizing aim to achieve?

   • AIncreasing resource capacity to handle peak loads
   • BMatching resource capacity to actual workload demands
   • CConsolidating resources into a single large instance
   • DMoving all resources to a different cloud provider
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company uses a cloud-based security platform to monitor its infrastructure. The platform charges based on the number of resources being monitored and the volume of data processed. The company has a large number of idle development environments that are only used during business hours. The security team wants to reduce monitoring costs without affecting the production environment. What should the team do?

   • AApply a data lifecycle policy to automatically delete logs from development environments after 30 days.
   • BMove all monitoring data to a cold storage tier to reduce costs.
   • CRight-size the monitoring scope by excluding idle development environments from continuous monitoring and enabling monitoring only when they are in use.
   • DIncrease the monitoring frequency for all environments to ensure no threats are missed.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a key benefit of reducing scan frequency on non-critical resources?

   • AIt improves the accuracy of scan results
   • BIt increases the risk of undetected vulnerabilities
   • CIt lowers compute and licensing costs
   • DIt eliminates the need for security monitoring
   Reveal Solution Discussion Select an answer first