Answer is C

CCAK P# 197 Cloud infrastructures are rapidly evolving, and new concepts and technologies, such as serverless, are being adopted. Serverless technologies have redefined the attribution of the security responsibilities between IaaS and PaaS and SaaS, and between the CSP and customer. Following are examples of measures an organization should have in place to mitigate the risk related to infrastructure and virtualization management. Establish, implement, enforce and maintain policies and procedures to ensure the security, retention and access control of audit logs. Continuously monitor security audit logs to detect anomalies, and take appropriate action. Monitor, encrypt and restrict communications between environments to authenticated and authorized connections.