ISC2 Certified Cloud Security Professional (CCSP) Practice Question
Your company operates services in AWS, Azure, and Google Cloud. Security operations needs to correlate events from all environments inside a single SIEM during incident investigations. Which logging design decision will most improve the traceability of data events across the three cloud providers?
Keep logs in their originating cloud region to minimize latency before forwarding them to the SIEM.
Encrypt log files at rest with each provider's default key management service.
Configure all workloads to use the same trusted NTP source and write timestamps with explicit UTC offsets in every log record.
Set every service to the most verbose logging level to capture maximum detail.
Correlating events from multiple clouds requires that timestamps in every log follow a common time reference; otherwise analysts cannot build an accurate sequence of events. Enabling a globally synchronized time source (such as UTC via NTP) for every workload and ensuring the timestamp and time-zone offset are written to each log entry provides that common reference. Encrypting logs, storing them in regional buckets, or increasing log verbosity can be valuable for other reasons, but none of those choices directly address the ability to align and trace events that originate in different clouds.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
Why is it important to use a trusted NTP source for logging in a multi-cloud environment?
Open an interactive chat with Bash
What is a UTC offset, and why should timestamps include it in multi-cloud logging?
Open an interactive chat with Bash
Why doesn't log encryption, storage location, or verbosity improve event traceability like time synchronization does?
Open an interactive chat with Bash
ISC2 Certified Cloud Security Professional (CCSP)
Cloud Data Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .