CCSP Log integrity verification Practice Question
A security analyst is investigating a potential breach and needs to verify the integrity of audit logs stored in cloud storage. Which feature should the analyst rely on to confirm that logs have not been tampered with?
⚠ Common exam trap
Candidates may confuse integrity verification with encryption or access control. Log file validation specifically provides hash-based integrity, not just confidentiality or retention.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Log file integrity validation
Integrity verification of audit logs is typically achieved through cryptographic hashing (e.g., SHA-256) and digital signatures provided by the cloud service provider's logging service. This allows the analyst to confirm that logs have not been altered since they were created.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Server-side encryption of logs
Why it's wrong here
Encryption protects confidentiality but does not guarantee integrity or prevent tampering.
- ✓
Log file integrity validation
Why this is correct
Log file validation uses cryptographic hashing and digital signatures to verify that log files have not been modified after delivery.
- ✗
Anomaly detection on logs
Why it's wrong here
Insight events provide analysis of unusual activity but do not verify log integrity.
- ✗
Immutable storage for logs
Why it's wrong here
Object lock prevents deletion or overwrite but does not provide cryptographic integrity verification.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CCSP question from scratch — 964 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.