1.10 Compare Security Operations Considerations of Cloud Platforms Such as IaaS, PaaS 350-201 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which security control is specifically used to protect data at rest in both IaaS and PaaS?

   • AEncryption
   • BPatch management
   • CLog aggregation
   • DNetwork segmentation
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company deploys a web application on an IaaS VM. The security team wants to ensure that all administrative access to the VM is authenticated and authorized. Which control should they implement?

   • AEnable network security group (NSG) rules to allow all traffic from the internet
   • BUse a public IP address without any access restrictions
   • CConfigure identity and access management (IAM) with multi-factor authentication (MFA) for all administrative accounts
   • DDisable all logging on the VM
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A development team deploys a containerized application to a PaaS offering that manages the container runtime and orchestration. The security team needs to ensure the application is protected. Which security task is the customer responsible for in this PaaS environment?

   • AManaging the hypervisor security patches
   • BReviewing and securing the application code and its dependencies
   • CPatching the underlying container runtime
   • DConfiguring the physical network firewalls
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is migrating a legacy application from on-premises to IaaS. The application requires a specific network configuration that includes multiple subnets and custom routing. The security team must ensure that the migration does not introduce unnecessary exposure. Which approach best meets the requirement?

   • AMigrate the application to PaaS instead of IaaS to avoid network configuration
   • BDeploy all VMs in a single subnet and rely on the provider's default security rules
   • CUse a VPN to connect the cloud VMs to the on-premises network and skip NSG configuration
   • DRecreate the network topology in the cloud using virtual networks, subnets, and user-defined routes, then apply NSGs to each subnet
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A development team uses a PaaS platform to host a REST API. The security team requires that all API calls be authenticated using OAuth 2.0. Which component is the customer responsible for configuring?

   • AThe physical network's firewall rules
   • BThe runtime's memory management settings
   • CThe API gateway's OAuth 2.0 token validation policy
   • DThe underlying OS's TLS configuration
   Reveal Solution Discussion Select an answer first