1.8 Identify the Challenges of Data Visibility (network, Host, and Cloud) in Detection 200-201 Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   A security analyst notices that a cloud instance used for a short-term batch job was terminated before the security team could collect forensic data. Which cloud visibility challenge is most directly illustrated by this situation?

   • ALimited network monitoring points
   • BEphemeral resources
   • CAPI-based access
   • DShared responsibility model
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company uses a cloud provider's managed database service. The security team wants to monitor database queries for malicious activity. They have access to the provider's audit logs, but they cannot install a host-based agent on the database server. What is the most likely reason for this limitation?

   • AThe security team does not have permission to view the provider's audit logs
   • BThe cloud provider manages the underlying infrastructure, so the customer does not have host-level access
   • CThe database is hosted on a server that is not connected to the internet
   • DThe database service does not support any form of logging
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   A security analyst is troubleshooting why the network monitoring system is not detecting malicious payloads in HTTPS traffic. Which characteristic of network data visibility is most directly responsible for this gap?

   • ALimited number of monitoring points
   • BLateral movement between internal hosts
   • CEncryption of the traffic payload
   • DHigh volume of network traffic
   Reveal Solution Discussion Select an answer first