1.10 Compare Security Operations Considerations of Cloud Platforms Such as IaaS, PaaS 350-201 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is migrating a legacy application to a PaaS platform. The application has a custom authentication module that requires access to the underlying OS. The security team is concerned about the migration. Which consideration is most relevant?

   • AThe customer can still manage the OS in PaaS
   • BPaaS may not support the custom authentication module because it requires OS-level access
   • CThe provider will secure the custom authentication module
   • DThe application will run unchanged because PaaS is compatible with all applications
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security team is responding to an incident involving a compromised IaaS VM. The VM has been isolated, but the team needs to preserve evidence for forensic analysis. Which action is most appropriate?

   • ATake a snapshot of the VM's disks and collect guest OS logs
   • BRely on the provider's incident response team to handle the investigation
   • CDelete the VM immediately to prevent further damage
   • DReboot the VM to clear any malware
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company runs a legacy application on an IaaS VM. The application requires a specific OS kernel version that is no longer supported by the cloud provider's marketplace. The security team must maintain compliance with the company's patch management policy. Which approach best balances security and operational requirements?

   • ADisable the patch management policy for this VM to avoid compliance violations
   • BDeploy a custom VM image with the required kernel version and implement a compensating control, such as a host-based intrusion detection system (HIDS)
   • CMigrate the application to a PaaS platform without verifying compatibility
   • DForce the application to run on a supported kernel version, even if it breaks functionality
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is deploying a database server on an IaaS VM. The security team needs to ensure that data at rest is protected. Which control is the customer responsible for implementing?

   • AEnabling disk encryption on the VM's virtual disks
   • BEncrypting the physical disks in the data center
   • CEnsuring the network is encrypted between the VM and the database
   • DConfiguring the hypervisor to encrypt memory
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In the shared responsibility model, which component is always the customer's responsibility regardless of the cloud service model?

   • AHypervisor security
   • BPhysical security of data centers
   • CNetwork infrastructure
   • DData and access management
   Reveal Solution Discussion Select an answer first