Explain Security Concerns, Measures, or Concepts of Cloud Operations. CLO-002 Practice Questions (Page 5)

Questions 21–25

1. 21application · easy

   A startup uses a public cloud provider and has just completed a vulnerability assessment. The report shows that several virtual machines are running outdated operating systems with known critical vulnerabilities. The startup's compliance policy requires that all systems be patched within 30 days of a patch release. What should the startup do FIRST to address the findings?

   • AConduct a penetration test to confirm the vulnerabilities are exploitable.
   • BReview the vulnerability assessment methodology for accuracy.
   • CDisable the virtual machines until a patch can be scheduled.
   • DApply the latest security patches to the affected virtual machines.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is a common system hardening practice?

   • AAllowing all inbound traffic to the system.
   • BUsing default passwords for all accounts.
   • CGranting all users administrative privileges for convenience.
   • DDisabling unused network ports and services.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a common technique used to verify data integrity?

   • AStoring multiple copies of the data in different regions.
   • BRestricting access to the data with permissions.
   • CCalculating a hash value of the data and comparing it to a known baseline.
   • DEncrypting the data with a symmetric key.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company stores critical financial records in a cloud database. The company wants to ensure that the records have not been altered by unauthorized parties. Which technique should the company use?

   • ARestrict access to the database to authorized users only.
   • BUse cryptographic hashing to generate checksums for the records and verify them periodically.
   • CPerform regular backups of the database.
   • DEncrypt the records with a strong encryption algorithm.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is an example of a threat to cloud operations?

   • AA distributed denial-of-service (DDoS) attack aimed at overwhelming a cloud service.
   • BA lack of encryption on data stored in a cloud database.
   • CA misconfigured storage bucket that allows public access.
   • DAn outdated software version with known security flaws.
   Reveal Solution Discussion Select an answer first