Explain Security Concerns, Measures, or Concepts of Cloud Operations. CLO-002 Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A financial services company is required by its compliance framework to validate the security of its cloud-hosted application. The company wants to simulate a real-world attack to identify exploitable weaknesses, but it must avoid disrupting production operations. Which approach should the company take?

   • ADeploy additional security monitoring tools to production.
   • BPerform a vulnerability scan on the production environment.
   • CReview the cloud provider's security audit reports.
   • DRun a penetration test against a staging environment that mirrors production.
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A company experiences a data breach in which an attacker accessed a cloud storage bucket containing customer data. The company's incident response plan requires that the breach be contained immediately and that evidence be preserved for forensic analysis. The company also has a legal obligation to notify affected customers within 72 hours. What should the company do FIRST?

   • AIsolate the affected bucket and take a snapshot for forensic analysis.
   • BDelete the bucket to prevent further access.
   • CNotify affected customers immediately.
   • DChange the encryption keys for the bucket.
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A company's cloud database was accidentally deleted by an administrator. The company has a backup strategy that performs a full backup every night and stores backups in the same cloud region. The company needs to restore the database to minimize data loss. What should the company do?

   • AContact the cloud provider to recover the deleted database from their internal systems.
   • BRestore the most recent backup to a new database instance.
   • CUse a point-in-time recovery feature if available to restore to just before the deletion.
   • DRecreate the database from scratch using the application's schema.
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   Which of the following best describes a threat in the context of cloud operations?

   • AA potential event or action that could exploit a vulnerability and cause harm to cloud resources.
   • BA process of identifying and fixing security weaknesses in a system.
   • CA weakness in a system that could be exploited by an attacker.
   • DA measure taken to protect cloud resources from unauthorized access.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Which of the following is a common output of a vulnerability assessment?

   • AA detailed log of all user login attempts and access patterns.
   • BA set of firewall rules that block all inbound traffic.
   • CA backup of all critical data stored in the cloud.
   • DA list of identified vulnerabilities with severity ratings and recommended remediation steps.
   Reveal Solution Discussion Select an answer first