🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 7 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Your security team must retain web application logs for seven years to satisfy audit requirements. Once the retention period ends, the logs should be automatically removed to minimize storage costs. Logs must remain tamper-proof during the entire retention period, even for administrators with full AWS permissions. Which solution best meets these requirements while keeping operational overhead low?

  • Stream the logs to Amazon CloudWatch Logs with a seven-year retention setting and enable log integrity validation.

  • Send the logs to an Amazon S3 bucket enabled for Object Lock in compliance mode and add a Lifecycle rule that expires objects after seven years.

  • Store the logs in Amazon S3 Glacier Deep Archive and turn on CloudTrail log file integrity validation for the bucket.

  • Archive the logs as encrypted EBS snapshots protected by AWS Backup with a seven-year retention policy.

ISC2 Systems Security Certified Practitioner (SSCP)
Risk Identification, Monitoring and Analysis
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot