CCSP Domain 5: Logging

Question 1

What do cloud providers commonly make available to retrieve forensic data from a cloud provider’s native logging facility?

Answer 1

APIs; carefully document the process, queries, and other details to ensure her data is forensically sound

Question 2

What information is most critical to log to ensure it is possible to properly identify ephemeral systems?

Answer 2

tags

Question 3

What is SIEM normalization?

Answer 3

SIEM normalizes incoming data to ensure that the data from variety of sources is presented consistently