CompTIA CySA+ (CS0-002) — Question 313

Which of the following BEST describes how logging and monitoring work when entering into a public cloud relationship with a service provider?

Answer options

• A. Logging and monitoring are not needed in a public cloud environment.
• B. Logging and monitoring are done by the data owners.
• C. Logging and monitoring duties are specified in the SLA and contract.
• D. Logging and monitoring are done by the service provider.

Correct answer: C

Explanation

The correct answer is C because the Service Level Agreement (SLA) clearly defines the responsibilities of both parties regarding logging and monitoring. Option A is incorrect as logging and monitoring are essential for security and compliance in the cloud. Option B is misleading since while data owners may have some responsibilities, the service provider also plays a crucial role, and option D is only partially correct as it does not encompass the full scope of responsibilities outlined in the SLA.