easyMultiple ChoiceObjective-mapped
CCSP Practice Question: A cloud administrator is configuring log…
A cloud administrator is configuring log retention for a financial application that must comply with PCI DSS. What is the minimum log retention period required by PCI DSS?
⚠ Common exam trap
Test-takers frequently confuse the 'immediately available' 90-day requirement with the total retention period, leading them to incorrectly select Option A instead of recognizing the full one-year retention mandate with the three-month online subset.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
At least one year with the most recent three months available online.
PCI DSS requirement 10.7 mandates that audit trail history must be retained for at least one year, with the most recent three months of logs immediately available for analysis. This ensures that historical data is preserved for forensic investigation while maintaining quick access to recent activity. Option D correctly states this dual requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
At least 90 days.
Why it's wrong here
90 days is below the minimum requirement.
- ✗
At least six months.
Why it's wrong here
Six months is insufficient for PCI DSS.
- ✗
At least five years.
Why it's wrong here
PCI DSS does not require five years; one year is the standard.
- ✓
At least one year with the most recent three months available online.
Why this is correct
PCI DSS Requirement 10.7 mandates retention for at least one year, with three months online.
Go deeper
Related to this question
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.