CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ157

VerifiedSecurity Operations

A cloud service provider requires its customer organizations to enable maximum audit logging for its data storage service and retain the logs for a period of three months. The audit logging generates an extremely high volume of logs. What is the MOST appropriate log-retention strategy?

Explanation

A tiered retention approach keeps recent audit logs immediately accessible in online storage while placing older, high-volume logs in lower-cost near-line storage that remains retrievable when needed. This meets the three-month retention requirement without paying online-storage costs for the entire log volume.

Community Discussion

No comments yet. Be the first to start the discussion!