Which statement best describes the purpose of logging and monitoring in cloud environments?

• A. Logging/monitoring is optional if encryption is used.
• B. Logging/monitoring provides visibility for detection and incident response across cloud service models.
• C. Logging is only for compliance and not for incident response.
• D. Monitoring replaces patch management.

Answer: (B)

Logging and monitoring give you essential visibility into what’s happening in cloud environments, which is critical for realistically detecting threats and guiding incident response across IaaS, PaaS, and SaaS. By collecting and analyzing audit trails, access events, configuration changes, and performance metrics, you can spot anomalies, investigate incidents, and coordinate containment and remediation. Encryption protects data, but it doesn’t reveal who did what or when, so visibility through logs is still needed for detection and forensics. Monitoring also provides real-time alerts and dashboards that help you respond quickly, not just for compliance but for ongoing security and operations. Monitoring does not replace patch management; they serve different purposes—visibility and alerting complement the process of keeping systems up to date.