An external audit is conducted on an organization's cloud Information Technology (IT) infrastructure. This organization has been using cloud IT services for several years, but its use is not regulated in any way by the organization and security audits have never been conducted in the past. Which task will be the MOST challenging to conduct an effective security audit?
Suggested Answer: C
Get Premium CPIM-8.0 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
20 comments · newest first
AL
Alesia
1 month ago
Asset inventory is key. Need to know what we have first.
AN
Anjelica
1 month ago
Software licenses could be a mess too. No records!
IR
Iraida
2 months ago
Logs are crucial. Without them, how to assess security?
JE
Jennie
2 months ago
I think resource forecast is tricky. Unpredictable usage.
EL
Eliseo
2 months ago
Definitely asset inventory. So many resources!
BL
Blythe
2 months ago
Access to logs seems tough. No previous audits!
TU
Tu
2 months ago
Totally agree, logs are usually a mess to sift through.
AN
Anna
2 months ago
Wait, how can they not have security audits before? That's wild!
MI
Mickie
3 months ago
I think resource forecast could be tricky too.
MI
Michel
3 months ago
Definitely asset inventory. So many moving parts!
FR
Francesco
3 months ago
Access to logs is gonna be tough!
LU
Lucy
3 months ago
Resource forecast might be tricky too, but logs are worse.
SO
Sommer
3 months ago
Wait, how can they not have audits before? That’s wild!
AL
Alex
4 months ago
Definitely agree, logs are a mess to sift through.
MI
Michael
5 months ago
I think asset inventory is the biggest challenge.
TI
Timothy
5 months ago
Access to logs will be super tough!
SL
Slyvia
6 months ago
Software license agreements seem less challenging compared to the others, but I guess it depends on how well they've managed their licenses over the years.
TH
Theola
6 months ago
I remember a practice question where access to logs was highlighted as a key issue. It makes sense that it could be a challenge here too.
JA
Jackie
6 months ago
I'm not sure, but access to logs could also be tough if they haven't set up proper logging practices.
AD
Adrianna
6 months ago
I think the asset inventory might be the most challenging since they haven't tracked their resources before. It could be a mess.