Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

The Logging Service stores data on the cloud in an instance that your organization does not control and thus provides protection from what?

1. Trojan horses

2. Viruses

3. Worms

4. Insider threat

The correct answer is: Insider threat

The Logging Service's storage in the cloud, which your organization does not control, provides protection from insider threats. Insider threats can arise from individuals within the organization who may abuse their access to sensitive data or logs. By using a third-party cloud service for logging, the data is separated from direct organizational control, reducing the risk that an insider could tamper with or delete the logs to conceal malicious activities. Cloud-based logging ensures that logs are securely stored and are less susceptible to manipulation by those with authorized access to the organization's environment. This separation of control means that even if an insider attempts to alter or delete logs, the original data still resides in the cloud service, thereby enhancing its integrity and availability for auditing and investigation purposes. In contrast, threats such as Trojan horses, viruses, and worms typically involve external malicious software that targets systems and are not directly mitigated by the control of logging mechanisms. While these threats can compromise systems, the nature of the logging service's deployment primarily impacts the organization's exposure to potential internal manipulations of data logs, which is the essence of an insider threat.