CCSP Cloud storage access logs Practice Question
A security team is investigating a potential data exfiltration incident where a large volume of data was downloaded from a cloud storage bucket. Which log source would provide the most granular details about the GET requests, including the requester identity and source IP?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cloud storage access logs
Cloud storage access logs provide detailed records of requests made to a bucket, including requester, source IP, and objects accessed. Cloud audit logs (data events) can also log storage operations, but storage access logs are more granular for this purpose.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VPC flow logs
Why it's wrong here
Virtual network flow logs capture traffic metadata but do not include details about storage operations like requester identity or object-level access.
- ✓
Cloud storage access logs
Why this is correct
Object storage access logs record detailed information about each read (GET) request, including the requester identity, source IP, and object accessed.
- ✗
Cloud management events (e.g., CloudTrail equivalent)
Why it's wrong here
Cloud API activity logs (management events) log control-plane operations, not data-plane operations such as object reads.
- ✗
Log aggregation service for storage (e.g., CloudWatch equivalent)
Why it's wrong here
Cloud monitoring logs for object storage may provide aggregate metrics but not granular details about individual requests.
Go deeper
Related to this question
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.