1.5 Identify and Describe Cost Optimization Methods (e.g., Scan Cadence, Duplicate Audit Logs) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   Which practice is an example of data lifecycle management for cost optimization?

   • AStoring all data in hot storage for quick access
   • BDeleting all logs after 30 days
   • CAutomatically moving old logs to cheaper storage tiers
   • DKeeping logs in multiple regions for redundancy
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is planning its cloud security budget for the next fiscal year. The security team has identified that a significant portion of the budget is spent on storing audit logs and running vulnerability scans. The team wants to optimize costs while maintaining compliance with industry regulations that require audit logs to be retained for a minimum of one year. What is the most effective cost optimization strategy?

   • AMove all audit logs to a cold storage tier that is slower to access but cheaper.
   • BReduce the audit log retention period to six months to save on storage costs.
   • CDisable vulnerability scanning for all non-critical assets to reduce scan costs.
   • DEliminate duplicate audit logs and adjust the scan cadence for non-critical assets.
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   A company's security operations center (SOC) is reviewing its log management strategy. The company ingests audit logs from multiple cloud accounts into a central SIEM. The SOC manager notices that the same API events are being logged by both the cloud provider's activity log and a third-party security tool. The SIEM storage costs are increasing. The SOC manager wants to reduce costs without losing the ability to detect security incidents. What should the SOC manager do?

   • ADisable the third-party security tool's logging to reduce the data volume.
   • BConfigure the SIEM to deduplicate events from different sources based on event ID.
   • CReduce the retention period for all logs to 30 days.
   • DIncrease the SIEM storage capacity to accommodate the growing data volume.
   Reveal Solution Discussion Select an answer first